topic Re: Palo Alto Firewall 8.0.3-h4 integration with ISE document in General Topics

Palo Alto Firewall 8.0.3-h4 integration with ISE document

preetpk — Mon, 04 Sep 2017 19:08:06 GMT

Hi,

Is there any document for Palo Alto configuration to integrate FW login authentication with Cisco ISE.

reaper — Tue, 05 Sep 2017 13:30:20 GMT

LMGTFY! 🙂

DB10 — Wed, 18 Jul 2018 03:15:37 GMT

Keep in mind that this will NOT work in a multi-domain environment with Cisco ISE 2.x. There is an ongoing Cisco Defect preventing integration. If you need this function, please add your company to the Cisco defect listed below. Please reply to the post on the Cisco Forums to advise you are impacted - https://supportforums.cisco.com/t5/aaa-identity-and-nac/are-you-impacted-ise-syslog-double-backslash/m-p/3417260

Defect Details

CSCvk09565 ISE 2.x onwards RFC 3164 is not being followed completely

Symptom

Syslog messages are sent with double slash in the username field.

Characters which are escaped with double slash are ,;{}\

Conditions

ISE 2.x version

Workaround

None

Further Problem Description

Below characters are escaped as of now

,;{}\

No Character should be escaped as per RFC 3164 which ISE follows.