Few questions here.
Why do you need user local on the PA devices?
Why do you need those users local on the ISE box rather then allowing access from AD groups via ISE?
If the users are local then password changes are not possible when a user changes their AD password, so how does that work?
Yes for admin access with Cisco ISE, I have to create users local on the PA and local DB on the ISE/ACS server why cant it pass AD creds like my Cisco Devices?
You should be able to. Check out this article.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!