That's what it does.  We use it primarily for open ssid and non local dot1x
logins.  I haven't upgraded to 7.0 yet so can't say for sure but it should
work.  Most of our ip-user mapping is for record purposes and not acl.  So
it helps.

Sent from my iPhone

On Jul 5, 2015, at 6:01 PM, Max McGrath <mmcgr...@carthage.edu> wrote:

Hi all -

A quick question regarding the firewall SSO integration -- specifically
with Palo Alto.

First, I see the guide assumes you have PanOS 6.0.  Is this supported on
the 7.x series?

Second, we don't currently force our users to authenticate to the PA before
using the Internet.  Once you are on our network -- you have access to the
Internet.

We do use Novell eDirectory on the back-end and the Palo Alto pulls from
that to generate the IP-User Mapping -- and it does a HORRIBLE job!

At the very minimum, would using SSO integration between PF and my PA
populate the IP-User Mapping in my PA?
--
Max McGrath
Network Administrator
Carthage College
262-552-5512
mmcgr...@carthage.edu

------------------------------------------------------------------------------
Don't Limit Your Business. Reach for the Cloud.
GigeNET's Cloud Solutions provide you with the tools and support that
you need to offload your IT needs and focus on growing your business.
Configured For All Businesses. Start Your Cloud Today.
https://www.gigenetcloud.com/

_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users
------------------------------------------------------------------------------
Don't Limit Your Business. Reach for the Cloud.
GigeNET's Cloud Solutions provide you with the tools and support that
you need to offload your IT needs and focus on growing your business.
Configured For All Businesses. Start Your Cloud Today.
https://www.gigenetcloud.com/
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to