Managent profiles should really enforce a min of TLSv1.2 on Palo Alto firewalls. In my environment TLSv1 is not allowed. This change worked for me. An alternative fix (untested) would be to specify the protocol as TLS and let the server control the protocol seclection.

PackeTsar / radiuid

An application to extract User-to-IP mappings from RADIUS accounting data and send them to Palo Alto firewalls for use by the User-ID function.

http://packetpushers.net/radiuid/

GNU General Public License v3.0

34 stars 10 forks source link

Closed giannidaprile closed 7 years ago

PackeTsar commented 7 years ago

Changing destination branch to dev branch dev2.3.2.1 and merging