12-14-2015 01:05 PM
Is there a way to configure the boxes to act as a NAS by sending a Radius Server (like Freeradius) accounting information? I am particularly interested on the session start and session stop attributes. I am about to provide Globalprotect VPN access to a community of users and need to account the resource use in the same Radius server where the authentication is done. Thank you for your help.
12-19-2015 10:08 AM
The on logs I remember about it are the following in the system logs, not sure it those are the ones you're looking for.
| globalprotect | informational | globalprotectgateway-auth-succ | GlobalProtect gateway user authentication succeeded. Login from: 1.1.1.1, User name: username. |
| globalprotect | informational | globalprotectgateway-config-release |
GlobalProtect gateway client configuration released. User name: username, Private IP: 1.1.1.1. |
| globalprotect | informational | globalprotectgateway-logout-succ | GlobalProtect gateway user logout succeeded. User name: username, Reason: reason. |
Currently the only way to send the system logs is forwarding to a syslog server, so the syslog server needs to parse them and resend them to your radius probably using a custom script.
Another way will be to create a script using the xml api in order to query the logs, parse the info and resends it to the radius server.Hope it helps,
Gerardo.
08-22-2022 02:27 PM
HI
Want to bring this question, from 2015, up again.
I have a MidEye solution for 2-factor authentication of our VPN users.
A feature, I want to use, is called Assisted Login.
https://docs.mideye.com/5.6.6/integrations/requirements/
It requres session monitoring and that The Palo Alto can send RADIUS accounting, start / stop messages.to the MidEye server.
This can be done with Pulse Secure, Checkpoint and Cisco. But I cant fid a way to do it with Palo Alto.
So after 7 years I thought there must be a solution
.
DGC
08-24-2022 01:44 AM
Hi @Pagengruppen ,
As far as I can see this hasn't been implemented since.
Please contact your sales contact and ask him to add your vote to the existing feature request for it (FR ID: 1109 - Support for Radius Accounting).
Best,
-Kiwi.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
