Aruba Central - Palo Alto - User ID Question

[MichaelSeddon]

Hey Guys,

I have a bunch of access points in Aruba Central, we are currently using UserID as a way to assign username to IP address with Palo Alto. I have found these instructions https://www.arubanetworks.com/techdocs/central/latest/content/aos10x/cfg/services/pan_firewall.htm and preliminary testing seems to be working. Just wondering if anyone with experience knows if this is will work or is there a better way.?

Thanks

[TomYoung]

Hi @MichaelSeddon ,

Getting User-ID information from 802.1x authentication (Aruba WiFi) is the best way.  When a user authenticates to the network, their username and IP address are immediately sent to the NGFW.  I didn't look at the doc much, but if you get both logins and logouts that is excellent.

You would not have User-ID information for wired users.  You would need to fill that gap.

Thanks,

Tom