topic Radius Accounting in General Topics

Radius Accounting

JCosta101 — Mon, 14 Dec 2015 21:05:43 GMT

Is there a way to configure the boxes to act as a NAS by sending a Radius Server (like Freeradius) accounting information? I am particularly interested on the session start and session stop attributes. I am about to provide Globalprotect VPN access to a community of users and need to account the resource use in the same Radius server where the authentication is done. Thank you for your help.

Re: Radius Accounting

glastra1 — Sat, 19 Dec 2015 18:08:08 GMT

The on logs I remember about it are the following in the system logs, not sure it those are the ones you're looking for.

globalprotect

informational

globalprotectgateway-auth-succ

GlobalProtect gateway user authentication succeeded. Login from: 1.1.1.1, User name: username.

globalprotect

informational

globalprotectgateway-config-release

GlobalProtect gateway client configuration released. User name: username, Private IP: 1.1.1.1.

globalprotect

informational

globalprotectgateway-logout-succ

GlobalProtect gateway user logout succeeded. User name: username, Reason: reason.

Currently the only way to send the system logs is forwarding to a syslog server, so the syslog server needs to parse them and resend them to your radius probably using a custom script.

Another way will be to create a script using the xml api in order to query the logs, parse the info and resends it to the radius server.Hope it helps,

Gerardo.

Re: Radius Accounting

Pagengruppen — Mon, 22 Aug 2022 21:27:05 GMT

HI
Want to bring this question, from 2015, up again.

I have a MidEye solution for 2-factor authentication of our VPN users.
A feature, I want to use, is called Assisted Login.
https://docs.mideye.com/5.6.6/integrations/requirements/

It requres session monitoring and that The Palo Alto can send RADIUS accounting, start / stop messages.to the MidEye server.
This can be done with Pulse Secure, Checkpoint and Cisco. But I cant fid a way to do it with Palo Alto.
So after 7 years I thought there must be a solution

DGC

Re: Radius Accounting

kiwi — Wed, 24 Aug 2022 08:44:23 GMT

Hi @Pagengruppen ,

As far as I can see this hasn't been implemented since.

Please contact your sales contact and ask him to add your vote to the existing feature request for it (FR ID: 1109 - Support for Radius Accounting).

Best,

-Kiwi.