search

PackeTsar / radiuid

An application to extract User-to-IP mappings from RADIUS accounting data and send them to Palo Alto firewalls for use by the User-ID function.
http://packetpushers.net/radiuid/
GNU General Public License v3.0
34 stars 10 forks source link

globalprotect #41

Open adespain opened 5 years ago

adespain commented 5 years ago

Hi, I am curious, would this work with the globalprotect client which authenticates to a globalprotect gateway that uses a radius server for authentication? I would like to create security policies based on the user/group if possible...

marcuscooke commented 5 years ago

Global Protect should automatically already update the firewall with the User-ID.

That being said, any RADIUS request where accounting can be sent to RadiUID could be used for ip to user mapping.