Alcatel-Lucent IAP93 Podręcznik Użytkownika Pobierz pdf (Strona 279)

279 | Integration with Security and Location Services Applications AOS-W Instant 6.3.1.1-4.0 | User Guide

security required for enterprises to secure their networks. In the context of businesses using social networking sites,

legacy firewalls are not able to differentiate valid authorized users from casual social networking users.

The Palo Alto next-generation firewall is based on user ID, which provides many methods for connecting to sources

of identity information and associating them with firewall policy rules. For example, it provides an option to gather

user information from Active Directory or LDAP server.

Integration with AOS-W Instant

The functionality provided by the PAN firewall based on user ID requires the collection of information from the

network. OAW-IAP maintains the network (such as mapping IP address) and user information for its clients in the

network and can provide the required information for the user ID feature on PAN firewall. Before sending the user-ID

mapping information to the PAN firewall, the OAW-IAP must retrieve an API key that will be used for authentication

for all APIs.

OAW-IAP and PAN firewall integration can be seamless with the XML-API that available with PAN-OS 5.0 or later.

To integrate an OAW-IAP with PAN user ID, a global profile is added. This profile can be configured on an OAW-IAP

with PAN firewall information such as IP address, port, user name, password, firewall enabled or disabled status.

The OAW-IAP sends messages to PAN based on the type of authentication and client status:

l After a client completes the authentication and is assigned an ip address, OAW-IAP will send the login message.

l After a client is disconnected or dissociated from the OAW-IAP, the OAW-IAP sends a logout message.

Configuring an OAW-IAP for PAN integration

You can configure an OAW-IAP for PAN firewall integration using AOS-W Instant UI or CLI.

In the AOS-W Instant UI

1. Click More>Services. The Services window is displayed.

2. Click Network Integration. The PAN firewall configuration options are displayed.

1 2 ... 274 275 276 277 278 279 280 281 282 283 284 ... 334 335

Brak uwag

Alcatel-Lucent IAP93 Podręcznik Użytkownika Strona 279