Cisco ISE and Palo Alto TACACS

Reply
Highlighted
L3 Networker

Cisco ISE and Palo Alto TACACS

Few questions here. 

 

Why do you need user local on the PA devices?

Why do you need those users local on the ISE box rather then allowing access from AD groups via ISE?

If the users are local then password changes are not possible when a user changes their AD password, so how does that work?

Tags (1)
Highlighted
Cyber Elite

Re: Cisco ISE and Palo Alto TACACS

Hello,

In what context, i.e. the users?

 

Regards,

Highlighted
L3 Networker

Re: Cisco ISE and Palo Alto TACACS

Yes for admin access with Cisco ISE, I have to create users local on the PA and local DB on the ISE/ACS server why cant it pass AD creds like my Cisco Devices?

Highlighted
Cyber Elite

Re: Cisco ISE and Palo Alto TACACS

Highlighted
Cyber Elite

Re: Cisco ISE and Palo Alto TACACS

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!