Home Knowledge Base SecureW2 Documentation Palo Alto RADIUS Accounting Configuration Steps

Palo Alto RADIUS Accounting Configuration Steps

1. Introduction

This document explains the steps required to test RADIUS Accounting events forwarded to a Palo Alto firewall.

2. Prerequisites

To forward Radius events to Palo Alto firewall port forwarding should be configured on the ISP router.

3. Configuring the ISP Router

To configure port forwarding in the ISP router, follow the given steps.

  1. Create a NAT – Virtual Server Configuration in the ISP router as follows:

    Attributes – 
    1. External IP Address – SecureW2 NAT IP
    2. External Start Port – User desired
    3. External End Port – User desired
    4. Protocol – TCP
    5. Server IP Address – LAN IP of the PaloAlto firewall, which is connected to the ISP router
    6. Source Port – 80

4. Configuring the Palo Alto Firewall

The Palo Alto firewall helps with SSL-encrypted traffic and applications. Perform the following configurations to receive RADIUS accounting events.

  1. Navigate to Network > Network Profiles > Interface Management > Management.
  2. Add the CENT NAT IP as shown in the following image.

5. Configuring the JoinNow Management Portal

  1. Log in to the JoinNow Management Portal.
  2. Go to Integration Hub > Adaptive Defense External Automations.
  3. Click Add External Automation.

  4. In the Name and Display Description fields, enter a name and a suitable description for the external connection.
  5. From the Type drop-down list, select Palo Alto.
  6. Click Save. The page reloads, and the Configuration tab is displayed.
  7. Click the Configuration tab:
    1. In the Firewall URL field, enter the server URL. 
    2. In the Username and Password fields, enter the credentials. 
    3. (Optional) Check the Custom SSL check-box to use your organization’s certificate, if required.
      1. In the Certificate field, click Choose File.
      2. Select the required certificate and click Upload.
    4. Click the Validate button to confirm the connection to the Firewall.
  8. Click Update.

Here is a sample RADIUS Accounting event for Login and Logout sent to the Palo Alto Firewall for the above configurations.

More Palo Alto Networks Explainers