09-04-2017 12:08 PM
Hi,
Is there any document for Palo Alto configuration to integrate FW login authentication with Cisco ISE.
09-05-2017 06:30 AM
LMGTFY! 🙂
Configuring Panorama Admin Role and Cisco ISE
Configure Cisco ISE with RADIUS for Palo Alto Networks
Panorama Access-Domain and Integration with Cisco ISE RADIUS Server
07-17-2018 06:12 PM - edited 07-17-2018 08:15 PM
Keep in mind that this will NOT work in a multi-domain environment with Cisco ISE 2.x. There is an ongoing Cisco Defect preventing integration. If you need this function, please add your company to the Cisco defect listed below. Please reply to the post on the Cisco Forums to advise you are impacted - https://supportforums.cisco.com/t5/aaa-identity-and-nac/are-you-impacted-ise-syslog-double-backslash...
Defect Details
CSCvk09565 ISE 2.x onwards RFC 3164 is not being followed completely
Symptom
Syslog messages are sent with double slash in the username field.
Characters which are escaped with double slash are ,;{}\
Conditions
ISE 2.x version
Workaround
None
Further Problem Description
Below characters are escaped as of now
,;{}\
No Character should be escaped as per RFC 3164 which ISE follows.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
