Global Protect and ISE integration

[Sanja_Rakic]

Hello,

I want to make an integration of Palo Alto and Cisco ISE in these terms:
1. Global Protect users can be authenticated using Cisco ISE
2. There are some dynamic ACLs that define access rights for certain group of users, so the customer would like to continue using these ACLs for Global Protect users

So my question is, ca this integration be made for authentication and authorization purposes?

BR,

Sanja

[JayGolf]

Hi @Sanja_Rakic ,

You can specify ISE as a radius server on the Palo and authenticate that way. Here is an external link to Packet Switch that shares config details. Configuring Palo Alto Administrator Authentication with Cisco ISE (Radius)