topic Re: Aruba Central - Palo Alto - User ID Question in General Topics

Aruba Central - Palo Alto - User ID Question

MichaelSeddon — Mon, 10 Jun 2024 07:23:20 GMT

Hey Guys,

I have a bunch of access points in Aruba Central, we are currently using UserID as a way to assign username to IP address with Palo Alto. I have found these instructions https://www.arubanetworks.com/techdocs/central/latest/content/aos10x/cfg/services/pan_firewall.htm and preliminary testing seems to be working. Just wondering if anyone with experience knows if this is will work or is there a better way.?

Thanks

Re: Aruba Central - Palo Alto - User ID Question

TomYoung — Sat, 15 Jun 2024 01:36:44 GMT

Hi @MichaelSeddon ,

Getting User-ID information from 802.1x authentication (Aruba WiFi) is the best way. When a user authenticates to the network, their username and IP address are immediately sent to the NGFW. I didn't look at the doc much, but if you get both logins and logouts that is excellent.

You would not have User-ID information for wired users. You would need to fill that gap.

Thanks,

Tom

Re: Aruba Central - Palo Alto - User ID Question

cdcirexx — Wed, 08 Oct 2025 00:02:21 GMT

Hello, I'm looking at something similar to this but using Juniper Mist AP's, I have my AP configured with my on premise radius server, it authenticates, and gets in the wifi network but doesn't have internet access, because of user-d info is not passed over to the fw. Has anyone on the Mist platform figured out a solution, or should I just use the Access assurance they're pushing now to customers to replace on premise radius?