General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free

Hey Everyone!

The Fuel User Group is now part of LIVEcommunity! If you haven’t come across Fuel before, it’s a space where you can connect with fellow cybersecurity folk, share knowledge, and learn from each other. It’s completely free as well! Fue

...

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

Rules and Best Practices

Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion

...

Palo Alto and Aruba Clearpass integration

Can someone please point me in the direction of any documentation for integrating PA firewalls with Aruba Clearpass. Understand Clearpass has a direct path into the API without the need for any programming?

Resolved! USER ID MAX USERS IN A GROUP???

Hello,

I've configured on PA5060 an Idenfication with AD:

PA5060: 4.1.6 USER ID AGENT : 4.1.4-3

LDAP SERVER 389

I do a group mapping by group but this group have more than 16000 users.

when I do a show user usersIDS , I can't see all my users. I know

...

Resolved! Support for Open LDAP

Hi All,

Does Palo Alto supports LDAP running in Linux operating systems? If yes, does the configuration is the same when using active directory?

Thanks,

Rex

User-ID with OpenLDAP

Hi,

I'm looking for a guide or guidelines on how to set-up User Identification with OpenLDAP. I've already set-up User-ID with Active Directory for an other customer but I fail to see how this is doable on a non-Windows machine (no PAN agent).

Any help

...

Resolved! Does Palo support LDAPv3?

Hi All,

Just a quick query. Does Palo support LDAPv3 in order to support special charaters in usernames? I've looked in guides etc but couldn't find anything specific

Many thanks

Entries in User-ID table show info pushed from XMLAPI never timeout

Hi guys,

My customer previously used XMLAPI to push User-ID info to Palo Alto but they now have an Aruba Clearpass appliance which will be handling all User-ID information via Syslog.

Due to software issues they cannot currently use XMLAPI between Clea

...

User-ID integration with a Samba domain?

Hey Guys,

I am installing a new PA at a customer who has a Samba domain instead of an AD domain.

I should point out that I know little about Samba.

Question is: how can I implement UserID?

* With the UserID agent -> This will not work, since the agent is

...

User mapping - IdleTimout and MaxTimeout architecture with GlobalProtect only (no User ID agents)

We have a setup for up to 2.000 employees. Every employee has the GlobalProtect installed, but we are not using any User ID agent.

We have only one portal configured, for both internal and external (vpn) connections.

On both gateways (internal and exte

...

Resolved! Can the Palo Alto Firewall autoguarantine users based on the number of violations they have made for a particular time?

Hello to All,

Can the Palo Alto Firewall autoguarantine users based on the number of violations they have made for a particular time?

I know that palo alto can add the users or ip addresses to and dynamic group using auto taging with tags (https:

...

PAN-Agent and Mac OS X Clients

Has anyone had sucess in the PAN-Agent capturing logins for Mac OS X clients joined to Active Directory?

We have about 100 iMacs running Mac OS 10.6.5, and I always get a "_unknown_" username when looking at their IP address in the PAN-Agent. We have

...

Resolved! User-ID Agent - not populating PAN

We have been using the User-ID Agent and it has been working for over a year. On the 17th, the PAN stopped populating the traffic log with the user-id information. The Agent is working fine (user ids show up in the monitor) and the PAN is connecting

...

Resolved! User authentication - Global Protect

HI.

I'm pre-staging a couple of PA2020's (active/passive), and am having an issue with getting authentication via AD working for Global Protect through Active Directory.

As far as I can tell, the LDAP configuration is correct - the firewall connects to

...

User ID and AD

Hi,

I am trying to configure User ID with Active Directory. But stuck with some errors, listed below :

1) Unable to retrieve the Userid IP mapping information from Active Directory (win 2003 Sp2).

2) After installing the User ID Agent and configuring...

...

Microsoft Direct Access - is user Identification possible?

Hi,

We have user identification working nicely using user ID agents on a few of our active directory domain members.

I've been looking at MS Direct Access (and formerly UAG) and it seems that a DA implementation would show all connected users as having

...

Aruba clearpass user id issue with Palo Alto

We have ClearPass integrated to Palo Alto. ClearPass sends user-id to the firewall upon successful authentication. Customer is experiencing an issue where the laptop (on wireless) would fail to access Internet at re-authentication.

There is another

...