09-02-2022 03:12 AM
Hi...
please let me know is Radius/802.1x & COA/Re-Authentication supported in Palo alto ?
09-02-2022 03:29 PM
Hello @sujithGovindaraj
I am afraid the answer is no. Regular 802.1X (NAC) authentication that is equivalent of what you can be done with ISE or Clearpass has no direct equivalent in Palo Alto products. RADIUS is supported, however use case is either to authenticate admins who access to Firewalls/Panorama or to link with MFA providers.
It is possible to parse 802.1X logs from authentication server and use it for User-ID authentication, but it is not possible to use Palo Alto Firewall directly as 802.1X authenticator/authentication server. Palo Alto supports other ways to authenticate users. Would it be possible to get mode details of the user case or issue you are dealing with?
Kind Regards
Pavel
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
