HID Palo Alto Networks and ActivID AS - Manual (Page 2)

ActivID Appliance RADIUS and Palo Alto Networks Integration | RADIUS Channel Integration Handbook
External Release | © 2014 HID Global Corporation/ASSA ABLOY AB. All rights reserved. Page | 2
Table of Contents
Table of Contents ....................................................................................................................................................... 2
1.0 Introduction ....................................................................................................................................................... 3
1.1 Scope of Document .................................................................................................................................... 3
1.2 Prerequisites .............................................................................................................................................. 3
2.0 GlobalProtect Configuration .............................................................................................................................. 4
2.1 Configuring User Authentication ................................................................................................................ 5
2.2 Authentication Profile ................................................................................................................................. 6
2.3 Configuring the SSL VPN Global Protect ................................................................................................... 7
2.3.1 Configuring the security zone ............................................................................................................ 7
2.3.2 Configuring the tunnel interface ........................................................................................................ 8
2.3.1 Configuring the SSL Certificate ......................................................................................................... 9
2.3.1 Configuring the portal ...................................................................................................................... 11
2.3.2 Configuring the gateway.................................................................................................................. 14
3.0 ActivID Appliance Configuration: Sequence of Procedures ........................................................................... 14
3.1 Configure RADIUS Channel ..................................................................................................................... 17
3.2 Managing User Repositories: An Overview ............................................................................................. 21
3.2.1 Create User Repository ................................................................................................................... 21
3.3 Configure Administration Groups, User Types, User Repositories, and Authentication Policies ............ 23
3.4 (optionally for OOB Authentication) Create OOB Delivery Gateway ....................................................... 24
3.5 (optionally for OOB Authentication) Assign An Out-of-Band Delivery Gateway ...................................... 25
3.6 (optionally for OOB Authentication) Assign An Out-of-Band Delivery Credential to An Existing
Authentication Policy .......................................................................................................................................... 26
3.7 (Optionally for OOB authentication) Assign An SMS Token .................................................................... 26
4.0 Sample Authentication .................................................................................................................................... 29