topic Palo Alto Clearpass integration disconnecting in General Topics

Palo Alto Clearpass integration disconnecting

Claw4609 — Fri, 17 Nov 2023 19:48:26 GMT

We are looking to utilize Cleaspass sending information to ours Palos for the purpose of user-id. We have this applied in some test groups but we are running into an issue where after a few days the connection appears to time out and the Palos stop received user-id information from Clearpass.

There are no errors in the Palos system logs, Clearpass just stops signing into the Palo. It does not appear there are any timeout timers on the Clearpass side. Is the only times that would affect this connection on the Palo side the API Key Lifetime or the Idel timeout?

Re: Palo Alto Clearpass integration disconnecting

CBaillie — Tue, 30 Apr 2024 11:25:46 GMT

Hi,

Seeing this on our firewalls as well at the minute. No errors logged in Event Viewer on Clearpass, just that the connection from the PA admin account times out, then the firewall stops receiving user-id from Clearpass.

Did you have any success fixing this?

Re: Palo Alto Clearpass integration disconnecting

Claw4609 — Tue, 30 Apr 2024 12:09:54 GMT

Ours ended up being a configuration mismatch on our Clearpass servers. We have two ClearPass servers and the "service parameters" of one was missing a true/false or a checkbox that the other had and that ended up fixing our issue. However I dont remember exactly which parameter it was.