Dell W-Series 334 Instant 6.5.1.0-4.3.1.0 User Guide - Page 294
Integration with Instant, Configuring a W-IAP for PAN integration, login, logout, More > Services
View all Dell W-Series 334 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 294 highlights
Integration with Instant The functionality provided by the PAN firewall based on user ID requires the collection of information from the network. W-IAP maintains the network (such as mapping IP address) and user information for its clients in the network and can provide the required information for the user ID on PAN firewall. Before sending the user-ID mapping information to the PAN firewall, the W-IAP must retrieve an API key that will be used for authentication for all APIs. W-IAP provides the User ID mapping information to the PAN firewall for integration. The client user id for authentication will not be sent to the PAN firewall unless it has a domain prefix. The W-IAP checks for the domain information in the client username for all login and logout requests sent to the PAN firewall. If the user id already has a domain prefix, W-IAP forwards the request to the PAN firewall. Otherwise, the static client domain configured in the PAN firewall profile will be prefixed to the user id and then sent to the PAN firewall. W-IAP and PAN firewall integration can be seamless with the XML-API that is available with PAN-OS 5.0 or later. To integrate a W-IAP with PAN user ID, a global profile is added. This profile can be configured on a W-IAP with PAN firewall information such as IP address, port, username, password, firewall-enabled or firewall-disabled status. The W-IAP sends messages to PAN based on the type of authentication and client status: l After a client completes the authentication and is assigned an IP address, W-IAP sends the login message. l After a client is disconnected or dissociated from the W-IAP, the W-IAP sends a logout message. Configuring a W-IAP for PAN integration You can configure a W-IAP for PAN firewall integration by using the Instant UI or the CLI. In the Instant UI To configure PAN firewall integration in a W-IAP: 1. Click More > Services. 2. Click Network Integration. The PAN firewall configuration options are displayed. 294 | Services Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide