- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
Hello everyone,
I'm excited to share that LIVEcommunity has two new dedicated areas: Cloud Identity Engine and SaaS Security.
The new Cloud Identity Engine is a way to collect attributes from on-premise Active Directory (AD) or cloud-based Azure AD and stores them in a secure, cloud-based infrastructure. This allows Palo Alto Networks' cloud-based applications and services to access the directory information. The Cloud Identity Engine (CIE) consists of two components: Directory sync, which provides user information, and Cloud Authentication service (CAS), which authenticates users.
Activating the new Cloud Identity Engine can help move your organization towards Zero Trust. You will also save time and headaches in deployment and management of identity-based controls on your network security infrastructure using point-and-click configuration with real-time validation.
FEATURE
|
DESCRIPTION
|
---|---|
Sync Directory Changes for Active Directory and Azure Active Directory
|
You can now synchronize only the recent changes to your on-premise Active Directory or Azure Active Directory. Syncing the changes takes much less time than syncing the entire directory. By default, the Cloud Identity Engine syncs changes every five minutes for these directory types.
|
Support for Identity Providers as a Single Source of User Authentication
|
The Cloud Identity Engine now supports the following identity providers (IdPs) for user authentication:
The Cloud Identity Engine provides support for other SAML 2.0-compliant IdPs in addition to these and supports multi-factor authentication (MFA) for Azure and Ping.
|
Integration with PAN-OS and Panorama
|
You can now integrate the Cloud Identity Engine with your Palo Alto Networks firewall or Panorama for a comprehensive identity solution. By configuring an Authentication profile on the firewall to use the Cloud Identity Engine for user authentication and the Cloud Identity Engine as an identity source, you can now both identify and authenticate your users.
|
Support for Germany (DE) Region
|
The Cloud Identity Engine now supports instances in the Germany (DE) region for customers who must store the data synced from their directories in this region to comply with data regulation requirements. For more information on how to configure this region, refer to Configure the Cloud Identity Agent in the Getting Started guide.
|
* Information reprinted from the Cloud Identity Engine Release Notes page.
Along with the new Engine, there is also a new Agent. This new Cloud Identity Agent—which is Directory Sync, rebranded—will allow you to integrate with the new Cloud Identity Engine.
FEATURE
|
DESCRIPTION
|
INTRODUCED IN AGENT VERSION
|
---|---|---|
TLS Security Enhancement
|
To strengthen the security of the Cloud Identity agent, the agent now uses the highest TLS version available on the host by default.
|
1.7.0
|
** Information reprinted from the New Features Introduced for the Cloud Identity Agent page
As our technology changes and adapts, so does the LIVEcommunity. We are happy to introduce you to the new SaaS Security pages inside the LIVEcommunity > Technologies drop down.
Inside of this new area lies SaaS Security discussions, articles, videos and additional resources.
We invite you to visit this new area to learn more about SaaS Security.
More Resources
To learn more about Cloud Identity, what it is and how to Set Up the Cloud Identity Engine, please check out the Cloud Identity techdocs page.
More details and screenshots of the Cloud Identity Engine can he found in the PAN-OS 10.1 New Features Guide about the Cloud Identity Engine
For more information about Cloud Identity App or Service features, New Agent features, system requirements or known and addressed issues, please be sure to check out the Cloud Identity Engine Release Notes and the New Features Guide on Cloud Identity Engine.
Thanks for taking time to read my blog.
If you enjoyed this, please hit the Like (thumb up) button, don't forget to subscribe to the LIVEcommunity Blog area.
As always, we welcome all comments and feedback in the comments section below.
Stay Secure,
Joe Delio
End of line
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Subject | Likes |
---|---|
2 Likes | |
1 Like | |
1 Like | |
1 Like | |
1 Like |
User | Likes Count |
---|---|
3 | |
3 | |
2 | |
1 | |
1 |