Send ClearPass XML-API IP-User mappings to PRSIMA firewalls

[MarcelST]

Hi there,

We have Aruba ClearPass configured to send User-IP mappings via XML-API directly to all the Palo Alto MGMT IPs we have on premises.

Now, with PRISMA firewalls being added into our infra I'm wondering how to make Prisma firewalls fitting into the picture: can I directly send events via XML-API from Aruba ClearPass to Prisma MGMT firewall IP address?

Or should I redesign my architecture, like having Prisma firewalls grab this logs from another firewall/panorama instead?

[SuperMario · Accepted solution]

Hi @MarcelST ,

You can redistribute user-ids learned on your on prem-firewall to Prisma Access. 

Please find the instructions in the link below and let us know if you have any further question:

https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-panorama-admin/configure-user-b...