Cisco ISE and Palo Alto TACACS

Showing results for 
Show  only  | Search instead for 
Did you mean: 

Cisco ISE and Palo Alto TACACS

L3 Networker

Few questions here. 


Why do you need user local on the PA devices?

Why do you need those users local on the ISE box rather then allowing access from AD groups via ISE?

If the users are local then password changes are not possible when a user changes their AD password, so how does that work?


Cyber Elite
Cyber Elite


In what context, i.e. the users?



Yes for admin access with Cisco ISE, I have to create users local on the PA and local DB on the ISE/ACS server why cant it pass AD creds like my Cisco Devices?

  • 4 replies
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!