{"id":840,"date":"2016-05-10T20:13:46","date_gmt":"2016-05-10T19:13:46","guid":{"rendered":"http:\/\/www.safekom.pl\/blog\/?p=840"},"modified":"2016-05-10T21:07:08","modified_gmt":"2016-05-10T20:07:08","slug":"lab-ise-jako-radius-dla-paloalto-dla-kont-admina","status":"publish","type":"post","link":"https:\/\/www.safekom.pl\/blog\/cisco\/lab-ise-jako-radius-dla-paloalto-dla-kont-admina\/","title":{"rendered":"LAB – ISE jako radius dla PaloAlto dla kont Admina"},"content":{"rendered":"

Po d\u0142u\u017cszej przerwie wr\u00f3ci\u0142em do integracji Cisco ISE 2.0 z Palo Alto Networks wykorzystuj\u0105c Radiusa z ISE jako punkt uwierzytelniania kont administracyjnych. Wiem, \u017ce zapewne wi\u0119kszo\u015b\u0107 autoryzacji kont administracyjnych opiera si\u0119 o LDAP oraz AD. Natomiast ja jak zawsz\u0119 musz\u0119 kombinowa\u0107 i komplikowa\u0107 scenariusze do labowania, ale dzi\u0119ki takiemu podej\u015bciu jestem w stanie bardziej pozna\u0107 oba systemy.<\/p>\n

Konfiguracja ISE<\/h5>\n

przechodzimy do Policy<\/strong> –> Policy Elements<\/strong> –> Dictationaries<\/strong> wybieramy system<\/strong> –> radius<\/strong> —RADIUS Vendors.\u00a0<\/strong>Tutaj b\u0119dzie nam pomocny\u00a0link<\/a>– gdzie mamy opisane atrybuty.
\nklikamy add<\/p>\n

\"palo_ise01\"<\/a><\/p>\n

Dictionary Name<\/strong>: PaloAlto – nasza nazwa
\nVendor ID<\/strong>: 25461<\/p>\n

klikamy submit<\/strong><\/p>\n

przechodzimy do nowo utworzonego profilu po czym przechodzimy do Dictionary Attributes.<\/strong>\u00a0Klikamy add
\nzgodnie z dokumentacj\u0105 PaloAlto. W tej chwili b\u0119dzie nam potrzebny jeden atrybut
\n\"palo_ise02\"<\/p>\n

Attribute Name<\/strong>: PaloAlto-Admin-Role
\nData Type<\/strong>: String
\nDirection<\/strong>: Both
\nID<\/strong>: 1
\nW kroku kolejnym tworzymy profil dla urz\u0105dza\u0144 typu PaloAlto. Przechodzimy do Administration<\/strong> –> Network Resources<\/strong> –> Network Device Profiles<\/strong> klikamy Add<\/p>\n

\"palo_ise03\"
\nDodajemy nasze urz\u0105dzenie do ISE, przechodzimy do Administration<\/strong> –> Network Resources<\/strong> –> Network Devices<\/strong> klikamy Add<\/p>\n

\"palo_ise09\"<\/a>
\nPodajemy dane:
\nName<\/strong>: nazw\u0119 dla naszego urz\u0105dzenia
\nIP Address<\/strong>: podajemy adres ip, z kt\u00f3rego nasze urz\u0105dzenie b\u0119dzie si\u0119 komunikowa\u0142o z serwerem ISE
\nDevice Profile<\/strong>: wybieramy nasz profil dla urz\u0105dze\u0144 Palo
\nDevice Type<\/strong>: ja stworzy\u0142em oddzielne repo dla urz\u0105dz\u0119\u0144 tego typu
\nLocation<\/strong>: r\u00f3wnie\u017c podzieli\u0142em na lokalizacj\u0119
\nWybieramy: RADIUS Authentication Settings<\/strong>
\nw polu Shared Secret<\/strong> wpisujemy nasze has\u0142o, kt\u00f3re b\u0119dzie wykorzystywane do po\u0142\u0105czenia PALO do ISE<\/p>\n

Wybieramy grup\u0119 AD, w \u00a0kt\u00f3rej b\u0119d\u0105 u\u017cytkownicy mog\u0105cy\u00a0zalogowa\u0107 si\u0119 na Palo<\/p>\n

Przechodzimy do Administration<\/strong> –> Indetity Management<\/strong> –> External Identity Soures,<\/strong> wybieramy Active Direcory<\/strong>\u00a0oraz nasz punkt spi\u0119cia z naszym AD. Tam wybieramy Groups,\u00a0<\/strong>dodajemy Add z menu Select Dictionary Groups<\/strong>\u00a0po czym otworzy si\u0119 okno, w kt\u00f3rym mo\u017cemy wyszuka\u0107 nasz\u0105 grup\u0119 dodaj\u0105c j\u0105 do ISE.<\/p>\n

\"palo_ise04\"<\/a><\/p>\n

Tworzymy profil dozwolonych protoko\u0142\u00f3w komunikacji PALO ISE, przechodzimy do Policy<\/strong> –> Policy Elements<\/strong> –> Results<\/strong> –> Authentication<\/strong> –> Allowed Protocols,<\/strong> klikamy Add<\/p>\n

\"palo_ise05\"<\/a><\/p>\n

Tworzymy profil autoryzacyjny, przechodzimy do Policy<\/strong> –> Policy Elements<\/strong> –> Results<\/strong> –> Authorization<\/strong> –> Authoriztion Profiles,<\/strong> kliamy Add<\/p>\n

\"palo_ise06\"<\/a>
\nw polu Advanced Attributes Settings<\/strong> wybieramy z menu PaloAlto<\/strong> –> PaloAlto-Admin-Role,<\/strong> w polu obok wpisujemy nazw\u0119 naszego profilu z Palo, kt\u00f3ry p\u00f3\u017aniej zostanie skonfigurowany na Palo.<\/p>\n

W polu Attributes Details<\/strong> mamy taki wynik:<\/p>\n

Access Type = ACCESS_ACCEPT\r\nPaloAlto-Admin-Role = admin-radius<\/pre>\n
przechodzimy do utworzenia regu\u0142y autoryzacyjnej, gdzie idziemy do Polcy<\/strong> –> Authorization<\/strong><\/p>\n
\"palo_ise07\"<\/a><\/p>\n
dodajemy now\u0105 rul\u0119\u00a0gdzie:
\nRule Name<\/strong>: nasza nazwa regu\u0142y
\nwarunki:
\nIf ANY and ISE-SRV:memberOf maches CN=PA-admin-full,CN=Users,DC=safekom,DC=pl
\nand DEVICE:Device Type Equals Device Type#All Device Types#Palo
\nthen Palo-auth<\/p>\n
 <\/p>\n
Konfiguracja Palo<\/h5>\n
Prszyszed\u0142 czas na konfiguracj\u0119\u00a0naszego Palo. Po zalogowaniu si\u0119 przechodzimy do Device<\/strong> –> Server Profiles<\/strong> –> Radius,<\/strong> dodajemy nowy profil z ISE<\/p>\n
\"palo_ise08\"<\/a><\/p>\n
gdzie:<\/p>\n
Profil Name<\/strong>: nasz profil Radiusa<\/p>\n
w polu servers<\/strong> dodajemy nasze serwery radiusa (w mym przypadku jest to jeden serwer)<\/p>\n
Name:\u00a0<\/strong>nasza nazwa rozpoznawcza<\/p>\n
RADIUS Server<\/strong>: adres IP lub FQDN naszego radiusa<\/p>\n
Secret<\/strong>: nasze ustawione has\u0142o<\/p>\n
Port<\/strong>: Standardowo 1812<\/p>\n
CLI<\/p>\n
set shared server-profile radius ISE server ISE01 secret -AQ==gPzxJUAM1wLKKOPC5tJg+lHyn0A=aloUXPMeEZ6yM\/xJpgEVLA==\r\nset shared server-profile radius ISE server ISE01 port 1812\r\nset shared server-profile radius ISE server ISE01 ip-address 192.168.1.55<\/pre>\n
Tworzymy profil Admin Roles – dzi\u0119ki temu profilowi mo\u017cliwe b\u0119dzie zalogowanie si\u0119 u\u017cytkownika z odpowiednimi uprawnieniami.<\/p>\n
\"palo_ise10\"<\/a><\/p>\n
W tym miejscu wa\u017cne jest aby nazwa profilu by\u0142a taka sama jak zdefiniowali\u015bmy j\u0105 na serwerze ISE admin-radius<\/strong><\/p>\n
Cli<\/p>\n
set shared admin-role admin-radius role device cli superuser\r\nset shared admin-role admin-radius role device webui dashboard enable\r\nset shared admin-role admin-radius role device webui acc enable\r\nset shared admin-role admin-radius role device webui monitor logs traffic enable\r\nset shared admin-role admin-radius role device webui monitor logs threat enable\r\nset shared admin-role admin-radius role device webui monitor logs url enable\r\nset shared admin-role admin-radius role device webui monitor logs wildfire enable\r\nset shared admin-role admin-radius role device webui monitor logs data-filtering enable\r\nset shared admin-role admin-radius role device webui monitor logs hipmatch enable\r\nset shared admin-role admin-radius role device webui monitor logs configuration enable\r\nset shared admin-role admin-radius role device webui monitor logs system enable\r\nset shared admin-role admin-radius role device webui monitor logs alarm enable\r\nset shared admin-role admin-radius role device webui monitor automated-correlation-engine correlation-objects enable\r\nset shared admin-role admin-radius role device webui monitor automated-correlation-engine correlated-events enable\r\nset shared admin-role admin-radius role device webui monitor packet-capture enable\r\nset shared admin-role admin-radius role device webui monitor app-scope enable\r\nset shared admin-role admin-radius role device webui monitor session-browser enable\r\nset shared admin-role admin-radius role device webui monitor botnet enable\r\nset shared admin-role admin-radius role device webui monitor pdf-reports manage-pdf-summary enable\r\nset shared admin-role admin-radius role device webui monitor pdf-reports pdf-summary-reports enable\r\nset shared admin-role admin-radius role device webui monitor pdf-reports user-activity-report enable\r\nset shared admin-role admin-radius role device webui monitor pdf-reports saas-application-usage-report enable\r\nset shared admin-role admin-radius role device webui monitor pdf-reports report-groups enable\r\nset shared admin-role admin-radius role device webui monitor pdf-reports email-scheduler enable\r\nset shared admin-role admin-radius role device webui monitor custom-reports application-statistics enable\r\nset shared admin-role admin-radius role device webui monitor custom-reports data-filtering-log enable\r\nset shared admin-role admin-radius role device webui monitor custom-reports threat-log enable\r\nset shared admin-role admin-radius role device webui monitor custom-reports threat-summary enable\r\nset shared admin-role admin-radius role device webui monitor custom-reports traffic-log enable\r\nset shared admin-role admin-radius role device webui monitor custom-reports traffic-summary enable\r\nset shared admin-role admin-radius role device webui monitor custom-reports url-log enable\r\nset shared admin-role admin-radius role device webui monitor custom-reports url-summary enable\r\nset shared admin-role admin-radius role device webui monitor custom-reports hipmatch enable\r\nset shared admin-role admin-radius role device webui monitor custom-reports wildfire-log enable\r\nset shared admin-role admin-radius role device webui monitor view-custom-reports enable\r\nset shared admin-role admin-radius role device webui monitor application-reports enable\r\nset shared admin-role admin-radius role device webui monitor threat-reports enable\r\nset shared admin-role admin-radius role device webui monitor url-filtering-reports enable\r\nset shared admin-role admin-radius role device webui monitor traffic-reports enable\r\nset shared admin-role admin-radius role device webui policies security-rulebase enable\r\nset shared admin-role admin-radius role device webui policies nat-rulebase enable\r\nset shared admin-role admin-radius role device webui policies qos-rulebase enable\r\nset shared admin-role admin-radius role device webui policies pbf-rulebase enable\r\nset shared admin-role admin-radius role device webui policies ssl-decryption-rulebase enable\r\nset shared admin-role admin-radius role device webui policies application-override-rulebase enable\r\nset shared admin-role admin-radius role device webui policies captive-portal-rulebase enable\r\nset shared admin-role admin-radius role device webui policies dos-rulebase enable\r\nset shared admin-role admin-radius role device webui objects addresses enable\r\nset shared admin-role admin-radius role device webui objects address-groups enable\r\nset shared admin-role admin-radius role device webui objects regions enable\r\nset shared admin-role admin-radius role device webui objects applications enable\r\nset shared admin-role admin-radius role device webui objects application-groups enable\r\nset shared admin-role admin-radius role device webui objects application-filters enable\r\nset shared admin-role admin-radius role device webui objects services enable\r\nset shared admin-role admin-radius role device webui objects service-groups enable\r\nset shared admin-role admin-radius role device webui objects tags enable\r\nset shared admin-role admin-radius role device webui objects global-protect hip-objects enable\r\nset shared admin-role admin-radius role device webui objects global-protect hip-profiles enable\r\nset shared admin-role admin-radius role device webui objects dynamic-block-lists enable\r\nset shared admin-role admin-radius role device webui objects custom-objects data-patterns enable\r\nset shared admin-role admin-radius role device webui objects custom-objects spyware enable\r\nset shared admin-role admin-radius role device webui objects custom-objects vulnerability enable\r\nset shared admin-role admin-radius role device webui objects custom-objects url-category enable\r\nset shared admin-role admin-radius role device webui objects security-profiles antivirus enable\r\nset shared admin-role admin-radius role device webui objects security-profiles anti-spyware enable\r\nset shared admin-role admin-radius role device webui objects security-profiles vulnerability-protection enable\r\nset shared admin-role admin-radius role device webui objects security-profiles url-filtering enable\r\nset shared admin-role admin-radius role device webui objects security-profiles file-blocking enable\r\nset shared admin-role admin-radius role device webui objects security-profiles wildfire-analysis enable\r\nset shared admin-role admin-radius role device webui objects security-profiles data-filtering enable\r\nset shared admin-role admin-radius role device webui objects security-profiles dos-protection enable\r\nset shared admin-role admin-radius role device webui objects security-profile-groups enable\r\nset shared admin-role admin-radius role device webui objects log-forwarding enable\r\nset shared admin-role admin-radius role device webui objects decryption-profile enable\r\nset shared admin-role admin-radius role device webui objects schedules enable\r\nset shared admin-role admin-radius role device webui network interfaces enable\r\nset shared admin-role admin-radius role device webui network zones enable\r\nset shared admin-role admin-radius role device webui network vlans enable\r\nset shared admin-role admin-radius role device webui network virtual-wires enable\r\nset shared admin-role admin-radius role device webui network virtual-routers enable\r\nset shared admin-role admin-radius role device webui network ipsec-tunnels enable\r\nset shared admin-role admin-radius role device webui network dhcp enable\r\nset shared admin-role admin-radius role device webui network dns-proxy enable\r\nset shared admin-role admin-radius role device webui network global-protect portals enable\r\nset shared admin-role admin-radius role device webui network global-protect gateways enable\r\nset shared admin-role admin-radius role device webui network global-protect mdm enable\r\nset shared admin-role admin-radius role device webui network global-protect device-block-list enable\r\nset shared admin-role admin-radius role device webui network qos enable\r\nset shared admin-role admin-radius role device webui network lldp enable\r\nset shared admin-role admin-radius role device webui network network-profiles gp-app-ipsec-crypto enable\r\nset shared admin-role admin-radius role device webui network network-profiles ike-gateways enable\r\nset shared admin-role admin-radius role device webui network network-profiles ipsec-crypto enable\r\nset shared admin-role admin-radius role device webui network network-profiles ike-crypto enable\r\nset shared admin-role admin-radius role device webui network network-profiles tunnel-monitor enable\r\nset shared admin-role admin-radius role device webui network network-profiles interface-mgmt enable\r\nset shared admin-role admin-radius role device webui network network-profiles zone-protection enable\r\nset shared admin-role admin-radius role device webui network network-profiles qos-profile enable\r\nset shared admin-role admin-radius role device webui network network-profiles lldp-profile enable\r\nset shared admin-role admin-radius role device webui network network-profiles bfd-profile enable\r\nset shared admin-role admin-radius role device webui device setup management enable\r\nset shared admin-role admin-radius role device webui device setup operations enable\r\nset shared admin-role admin-radius role device webui device setup services enable\r\nset shared admin-role admin-radius role device webui device setup content-id enable\r\nset shared admin-role admin-radius role device webui device setup wildfire enable\r\nset shared admin-role admin-radius role device webui device setup session enable\r\nset shared admin-role admin-radius role device webui device setup hsm enable\r\nset shared admin-role admin-radius role device webui device high-availability enable\r\nset shared admin-role admin-radius role device webui device config-audit enable\r\nset shared admin-role admin-radius role device webui device administrators read-only\r\nset shared admin-role admin-radius role device webui device admin-roles read-only\r\nset shared admin-role admin-radius role device webui device authentication-profile enable\r\nset shared admin-role admin-radius role device webui device authentication-sequence enable\r\nset shared admin-role admin-radius role device webui device user-identification enable\r\nset shared admin-role admin-radius role device webui device vm-info-source enable\r\nset shared admin-role admin-radius role device webui device certificate-management certificates enable\r\nset shared admin-role admin-radius role device webui device certificate-management certificate-profile enable\r\nset shared admin-role admin-radius role device webui device certificate-management ocsp-responder enable\r\nset shared admin-role admin-radius role device webui device certificate-management ssl-tls-service-profile enable\r\nset shared admin-role admin-radius role device webui device certificate-management scep enable\r\nset shared admin-role admin-radius role device webui device block-pages enable\r\nset shared admin-role admin-radius role device webui device log-settings system enable\r\nset shared admin-role admin-radius role device webui device log-settings config enable\r\nset shared admin-role admin-radius role device webui device log-settings hipmatch enable\r\nset shared admin-role admin-radius role device webui device log-settings cc-alarm enable\r\nset shared admin-role admin-radius role device webui device log-settings manage-log enable\r\nset shared admin-role admin-radius role device webui device server-profile snmp-trap enable\r\nset shared admin-role admin-radius role device webui device server-profile syslog enable\r\nset shared admin-role admin-radius role device webui device server-profile email enable\r\nset shared admin-role admin-radius role device webui device server-profile netflow enable\r\nset shared admin-role admin-radius role device webui device server-profile radius enable\r\nset shared admin-role admin-radius role device webui device server-profile tacplus enable\r\nset shared admin-role admin-radius role device webui device server-profile ldap enable\r\nset shared admin-role admin-radius role device webui device server-profile kerberos enable\r\nset shared admin-role admin-radius role device webui device local-user-database users enable\r\nset shared admin-role admin-radius role device webui device local-user-database user-groups enable\r\nset shared admin-role admin-radius role device webui device scheduled-log-export enable\r\nset shared admin-role admin-radius role device webui device software enable\r\nset shared admin-role admin-radius role device webui device global-protect-client enable\r\nset shared admin-role admin-radius role device webui device dynamic-updates enable\r\nset shared admin-role admin-radius role device webui device licenses enable\r\nset shared admin-role admin-radius role device webui device support enable\r\nset shared admin-role admin-radius role device webui device master-key enable\r\nset shared admin-role admin-radius role device webui privacy show-full-ip-addresses enable\r\nset shared admin-role admin-radius role device webui privacy show-user-names-in-logs-and-reports enable\r\nset shared admin-role admin-radius role device webui privacy view-pcap-files enable\r\nset shared admin-role admin-radius role device webui validate enable\r\nset shared admin-role admin-radius role device webui commit enable\r\nset shared admin-role admin-radius role device webui global system-alarms enable\r\nset shared admin-role admin-radius role device xmlapi report enable\r\nset shared admin-role admin-radius role device xmlapi log enable\r\nset shared admin-role admin-radius role device xmlapi config enable\r\nset shared admin-role admin-radius role device xmlapi op enable\r\nset shared admin-role admin-radius role device xmlapi commit enable\r\nset shared admin-role admin-radius role device xmlapi user-id enable\r\nset shared admin-role admin-radius role device xmlapi export enable\r\nset shared admin-role admin-radius role device xmlapi import enable<\/pre>\n
Tworzymy profil dla Authentication Profile,<\/strong> gdzie b\u0119dziemy wykorzystywa\u0107 nasz profil dla ISE:<\/p>\n
\"palo_ise11\"<\/a>
\nw Type<\/strong> wybieramy RADIUS
\nServer Profile<\/strong> wybieramy nasz profil ISE
\nW Advanced<\/strong>
\nw Allow List<\/strong> dajemy all<\/strong><\/p>\n
\"palo_ise12\"<\/a><\/p>\n
Cli<\/p>\n
set shared authentication-profile ISE method radius server-profile ISE\r\nset shared authentication-profile ISE allow-list all\r\nset shared authentication-profile ISE lockout lockout-time 1\r\nset shared authentication-profile ISE lockout failed-attempts 5<\/pre>\n
Po wykonaniu commitu pr\u00f3bujemy zalogowa\u0107 si\u0119 do urz\u0105dzenia po ssh<\/p>\n
\"palo_ise13\"<\/a><\/p>\n
w logach PA widzimy:<\/p>\n
Web<\/p>\n
wyszukujemy po:<\/p>\n
( object eq auth )<\/pre>\n
lub jak ni\u017cej na screenie:<\/p>\n
( eventid eq auth-success )<\/pre>\n
Jak chcemy wyszuka\u0107 b\u0142\u0119dne autoryzacje\u00a0stosujemy filtr:<\/p>\n
( eventid eq auth-fail )<\/pre>\n
\"palo_ise18\"<\/a><\/p>\n
CLI<\/p>\n
michal-adminpa@PA-VM> show log system eventid equal auth-success\r\nTime                Severity Subtype Object EventID ID Description\r\n===============================================================================\r\n2016\/05\/10 13:00:16 info     general auth   auth-su 0  authenticated for user 'michal-adminpa'.   auth profile 'auth', vsys 'shared', server profile\r\n 'ISE', server address '192.168.1.55', From: 192.168.1.10.<\/pre>\n
 <\/p>\n
Taki u\u017cytkownik nie mo\u017ce dodawa\u0107 kont lokalnych i modyfikowa\u0107 ich oraz dodawa\u0107\/modyfkowa\u0107 Admin Rulses\u00a0<\/strong>tak jak wida\u0107 ni\u017cej pola add oraz delete mam wyszarzane:<\/p>\n
\"palo_ise17\"
\nAby umo\u017cliwi\u0107 dost\u0119p na pe\u0142nych prawach musimy utworzy\u0107 konto Administratora:<\/p>\n
\"palo_ise15\"<\/a><\/p>\n
gdzie Name\u00a0<\/strong>jest naszym userem, kt\u00f3ry jest w Radiusie.<\/p>\n
CLI<\/p>\n
set mgt-config users michal permissions role-based superuser yes\r\nset mgt-config users michal authentication-profile ISE<\/pre>\n
Po takim zabiegu mamy konto z full uprawnieniami, zalogowany administrator ju\u017c mo\u017ce modyfikowa\u0107 Admin Roles<\/strong><\/p>\n
\"palo_ise19\"<\/a><\/p>\n
Poprzednie wpisy dotycz\u0105ce ISE:<\/p>\n
    \n
  1. LAB \u2013 Cisco ISE 2.0 w Labie \u2013 cz1<\/a><\/li>\n
  2. LAB \u2013 Cisco ISE join AD cz.2<\/a><\/li>\n
  3. Lab \u2013 Cisco ISE \u2013 AAA dla Junosa<\/a><\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"
    Po d\u0142u\u017cszej przerwie wr\u00f3ci\u0142em do integracji Cisco ISE 2.0 z Palo Alto Networks wykorzystuj\u0105c Radiusa z ISE jako punkt uwierzytelniania kont administracyjnych. Wiem, \u017ce zapewne wi\u0119kszo\u015b\u0107 autoryzacji kont administracyjnych opiera si\u0119 o LDAP oraz AD. Natomiast ja jak zawsz\u0119 musz\u0119 kombinowa\u0107 i komplikowa\u0107 scenariusze do labowania, ale dzi\u0119ki takiemu podej\u015bciu jestem w stanie bardziej pozna\u0107 […]<\/p>\n","protected":false},"author":1,"featured_media":304,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"LAB - ISE jako radius dla PaloAlto dla kont Admina [in Polish lang. how to integrate Cisco ISE with palo alto netowrks for admin account ]","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[4,84,78],"tags":[250,150,244,246,245,243,248,138,81,80,140,247,86,249],"class_list":["post-840","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cisco","category-lab","category-palo-alto","tag-250","tag-aaa","tag-admin","tag-admin-role","tag-authentication-profile","tag-cisco-ise-2-0","tag-dictionary","tag-ise","tag-palo-alto-networks","tag-paloalto","tag-radius","tag-server-profile","tag-user","tag-vendor-id-25461"],"yoast_head":"\nLAB - ISE jako radius dla PaloAlto dla kont Admina - SafeKom Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.safekom.pl\/blog\/cisco\/lab-ise-jako-radius-dla-paloalto-dla-kont-admina\/\" \/>\n<meta property=\"og:locale\" content=\"pl_PL\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"LAB - ISE jako radius dla PaloAlto dla kont Admina - SafeKom Blog\" \/>\n<meta property=\"og:description\" content=\"Po d\u0142u\u017cszej przerwie wr\u00f3ci\u0142em do integracji Cisco ISE 2.0 z Palo Alto Networks wykorzystuj\u0105c Radiusa z ISE jako punkt uwierzytelniania kont administracyjnych. Wiem, \u017ce zapewne wi\u0119kszo\u015b\u0107 autoryzacji kont administracyjnych opiera si\u0119 o LDAP oraz AD. Natomiast ja jak zawsz\u0119 musz\u0119 kombinowa\u0107 i komplikowa\u0107 scenariusze do labowania, ale dzi\u0119ki takiemu podej\u015bciu jestem w stanie bardziej pozna\u0107 […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.safekom.pl\/blog\/cisco\/lab-ise-jako-radius-dla-paloalto-dla-kont-admina\/\" \/>\n<meta property=\"og:site_name\" content=\"SafeKom Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/safekompl\" \/>\n<meta property=\"article:published_time\" content=\"2016-05-10T19:13:46+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2016-05-10T20:07:08+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/08\/Paloalto_logo.png?fit=566%2C680&ssl=1\" \/>\n\t<meta property=\"og:image:width\" content=\"566\" \/>\n\t<meta property=\"og:image:height\" content=\"680\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Micha\u0142 Iwa\u0144czuk\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@MIwaczuk\" \/>\n<meta name=\"twitter:site\" content=\"@MIwaczuk\" \/>\n<meta name=\"twitter:label1\" content=\"Napisane przez\" \/>\n\t<meta name=\"twitter:data1\" content=\"Micha\u0142 Iwa\u0144czuk\" \/>\n\t<meta name=\"twitter:label2\" content=\"Szacowany czas czytania\" \/>\n\t<meta name=\"twitter:data2\" content=\"12 minut\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/cisco\\\/lab-ise-jako-radius-dla-paloalto-dla-kont-admina\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/cisco\\\/lab-ise-jako-radius-dla-paloalto-dla-kont-admina\\\/\"},\"author\":{\"name\":\"Micha\u0142 Iwa\u0144czuk\",\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/#\\\/schema\\\/person\\\/fd4cc931b624af4b7353d36d92ba7181\"},\"headline\":\"LAB – ISE jako radius dla PaloAlto dla kont Admina\",\"datePublished\":\"2016-05-10T19:13:46+00:00\",\"dateModified\":\"2016-05-10T20:07:08+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/cisco\\\/lab-ise-jako-radius-dla-paloalto-dla-kont-admina\\\/\"},\"wordCount\":740,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/cisco\\\/lab-ise-jako-radius-dla-paloalto-dla-kont-admina\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/www.safekom.pl\\\/blog\\\/wp-content\\\/uploads\\\/2015\\\/08\\\/Paloalto_logo.png?fit=566%2C680&ssl=1\",\"keywords\":[\"25461\",\"aaa\",\"admin\",\"admin-role\",\"authentication-profile\",\"Cisco ISE 2.0\",\"Dictionary\",\"ISE\",\"Palo Alto Networks\",\"PaloAlto\",\"Radius\",\"server-profile\",\"user\",\"Vendor ID: 25461\"],\"articleSection\":[\"Cisco\",\"Lab\",\"Palo Alto\"],\"inLanguage\":\"pl-PL\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/cisco\\\/lab-ise-jako-radius-dla-paloalto-dla-kont-admina\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/cisco\\\/lab-ise-jako-radius-dla-paloalto-dla-kont-admina\\\/\",\"url\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/cisco\\\/lab-ise-jako-radius-dla-paloalto-dla-kont-admina\\\/\",\"name\":\"LAB - ISE jako radius dla PaloAlto dla kont Admina - SafeKom Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/cisco\\\/lab-ise-jako-radius-dla-paloalto-dla-kont-admina\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/cisco\\\/lab-ise-jako-radius-dla-paloalto-dla-kont-admina\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/www.safekom.pl\\\/blog\\\/wp-content\\\/uploads\\\/2015\\\/08\\\/Paloalto_logo.png?fit=566%2C680&ssl=1\",\"datePublished\":\"2016-05-10T19:13:46+00:00\",\"dateModified\":\"2016-05-10T20:07:08+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/cisco\\\/lab-ise-jako-radius-dla-paloalto-dla-kont-admina\\\/#breadcrumb\"},\"inLanguage\":\"pl-PL\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/cisco\\\/lab-ise-jako-radius-dla-paloalto-dla-kont-admina\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"pl-PL\",\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/cisco\\\/lab-ise-jako-radius-dla-paloalto-dla-kont-admina\\\/#primaryimage\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/www.safekom.pl\\\/blog\\\/wp-content\\\/uploads\\\/2015\\\/08\\\/Paloalto_logo.png?fit=566%2C680&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/www.safekom.pl\\\/blog\\\/wp-content\\\/uploads\\\/2015\\\/08\\\/Paloalto_logo.png?fit=566%2C680&ssl=1\",\"width\":566,\"height\":680},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/cisco\\\/lab-ise-jako-radius-dla-paloalto-dla-kont-admina\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Strona g\u0142\u00f3wna\",\"item\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"LAB – ISE jako radius dla PaloAlto dla kont Admina\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/\",\"name\":\"SafeKom Blog\",\"description\":\"Notatki Architekta i in\u017cyniera zwi\u0105zanego rozwi\u0105zaniami on-prem\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pl-PL\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/#organization\",\"name\":\"SafeKom Blog\",\"url\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pl-PL\",\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/www.safekom.pl\\\/blog\\\/wp-content\\\/uploads\\\/2015\\\/05\\\/cropped-logo.png?fit=512%2C512&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/www.safekom.pl\\\/blog\\\/wp-content\\\/uploads\\\/2015\\\/05\\\/cropped-logo.png?fit=512%2C512&ssl=1\",\"width\":512,\"height\":512,\"caption\":\"SafeKom Blog\"},\"image\":{\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/safekompl\",\"https:\\\/\\\/x.com\\\/MIwaczuk\",\"https:\\\/\\\/www.linkedin.com\\\/in\\\/michaliwanczuk\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/#\\\/schema\\\/person\\\/fd4cc931b624af4b7353d36d92ba7181\",\"name\":\"Micha\u0142 Iwa\u0144czuk\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pl-PL\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/cc6dda4ee8d21d1f254147e5ee6f5e38881b88a4a12a5774ca42380597e52014?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/cc6dda4ee8d21d1f254147e5ee6f5e38881b88a4a12a5774ca42380597e52014?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/cc6dda4ee8d21d1f254147e5ee6f5e38881b88a4a12a5774ca42380597e52014?s=96&d=mm&r=g\",\"caption\":\"Micha\u0142 Iwa\u0144czuk\"},\"description\":\"Pasjonat komputerowy od zawsze oraz maniak w zakresie sieci, wirtualizacji oraz bezpiecze\u0144stwa IT. Kompetentny in\u017cynier z du\u017cym do\u015bwiadczeniem w realizacji projekt\u00f3w informatycznych i telekomunikacyjnych. Wieloletni administrator IT, kt\u00f3ry utrzymuje systemy informatyczne dostosowuj\u0105c je do wymog\u00f3w biznesowych z zapewnieniem dost\u0119pno\u015bci 24\\\/7\\\/365.\",\"url\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/author\\\/admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"LAB - ISE jako radius dla PaloAlto dla kont Admina - SafeKom Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.safekom.pl\/blog\/cisco\/lab-ise-jako-radius-dla-paloalto-dla-kont-admina\/","og_locale":"pl_PL","og_type":"article","og_title":"LAB - ISE jako radius dla PaloAlto dla kont Admina - SafeKom Blog","og_description":"Po d\u0142u\u017cszej przerwie wr\u00f3ci\u0142em do integracji Cisco ISE 2.0 z Palo Alto Networks wykorzystuj\u0105c Radiusa z ISE jako punkt uwierzytelniania kont administracyjnych. Wiem, \u017ce zapewne wi\u0119kszo\u015b\u0107 autoryzacji kont administracyjnych opiera si\u0119 o LDAP oraz AD. Natomiast ja jak zawsz\u0119 musz\u0119 kombinowa\u0107 i komplikowa\u0107 scenariusze do labowania, ale dzi\u0119ki takiemu podej\u015bciu jestem w stanie bardziej pozna\u0107 […]","og_url":"https:\/\/www.safekom.pl\/blog\/cisco\/lab-ise-jako-radius-dla-paloalto-dla-kont-admina\/","og_site_name":"SafeKom Blog","article_publisher":"https:\/\/www.facebook.com\/safekompl","article_published_time":"2016-05-10T19:13:46+00:00","article_modified_time":"2016-05-10T20:07:08+00:00","og_image":[{"width":566,"height":680,"url":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/08\/Paloalto_logo.png?fit=566%2C680&ssl=1","type":"image\/png"}],"author":"Micha\u0142 Iwa\u0144czuk","twitter_card":"summary_large_image","twitter_creator":"@MIwaczuk","twitter_site":"@MIwaczuk","twitter_misc":{"Napisane przez":"Micha\u0142 Iwa\u0144czuk","Szacowany czas czytania":"12 minut"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.safekom.pl\/blog\/cisco\/lab-ise-jako-radius-dla-paloalto-dla-kont-admina\/#article","isPartOf":{"@id":"https:\/\/www.safekom.pl\/blog\/cisco\/lab-ise-jako-radius-dla-paloalto-dla-kont-admina\/"},"author":{"name":"Micha\u0142 Iwa\u0144czuk","@id":"https:\/\/www.safekom.pl\/blog\/#\/schema\/person\/fd4cc931b624af4b7353d36d92ba7181"},"headline":"LAB – ISE jako radius dla PaloAlto dla kont Admina","datePublished":"2016-05-10T19:13:46+00:00","dateModified":"2016-05-10T20:07:08+00:00","mainEntityOfPage":{"@id":"https:\/\/www.safekom.pl\/blog\/cisco\/lab-ise-jako-radius-dla-paloalto-dla-kont-admina\/"},"wordCount":740,"commentCount":0,"publisher":{"@id":"https:\/\/www.safekom.pl\/blog\/#organization"},"image":{"@id":"https:\/\/www.safekom.pl\/blog\/cisco\/lab-ise-jako-radius-dla-paloalto-dla-kont-admina\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/08\/Paloalto_logo.png?fit=566%2C680&ssl=1","keywords":["25461","aaa","admin","admin-role","authentication-profile","Cisco ISE 2.0","Dictionary","ISE","Palo Alto Networks","PaloAlto","Radius","server-profile","user","Vendor ID: 25461"],"articleSection":["Cisco","Lab","Palo Alto"],"inLanguage":"pl-PL","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.safekom.pl\/blog\/cisco\/lab-ise-jako-radius-dla-paloalto-dla-kont-admina\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.safekom.pl\/blog\/cisco\/lab-ise-jako-radius-dla-paloalto-dla-kont-admina\/","url":"https:\/\/www.safekom.pl\/blog\/cisco\/lab-ise-jako-radius-dla-paloalto-dla-kont-admina\/","name":"LAB - ISE jako radius dla PaloAlto dla kont Admina - SafeKom Blog","isPartOf":{"@id":"https:\/\/www.safekom.pl\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.safekom.pl\/blog\/cisco\/lab-ise-jako-radius-dla-paloalto-dla-kont-admina\/#primaryimage"},"image":{"@id":"https:\/\/www.safekom.pl\/blog\/cisco\/lab-ise-jako-radius-dla-paloalto-dla-kont-admina\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/08\/Paloalto_logo.png?fit=566%2C680&ssl=1","datePublished":"2016-05-10T19:13:46+00:00","dateModified":"2016-05-10T20:07:08+00:00","breadcrumb":{"@id":"https:\/\/www.safekom.pl\/blog\/cisco\/lab-ise-jako-radius-dla-paloalto-dla-kont-admina\/#breadcrumb"},"inLanguage":"pl-PL","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.safekom.pl\/blog\/cisco\/lab-ise-jako-radius-dla-paloalto-dla-kont-admina\/"]}]},{"@type":"ImageObject","inLanguage":"pl-PL","@id":"https:\/\/www.safekom.pl\/blog\/cisco\/lab-ise-jako-radius-dla-paloalto-dla-kont-admina\/#primaryimage","url":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/08\/Paloalto_logo.png?fit=566%2C680&ssl=1","contentUrl":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/08\/Paloalto_logo.png?fit=566%2C680&ssl=1","width":566,"height":680},{"@type":"BreadcrumbList","@id":"https:\/\/www.safekom.pl\/blog\/cisco\/lab-ise-jako-radius-dla-paloalto-dla-kont-admina\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Strona g\u0142\u00f3wna","item":"https:\/\/www.safekom.pl\/blog\/"},{"@type":"ListItem","position":2,"name":"LAB – ISE jako radius dla PaloAlto dla kont Admina"}]},{"@type":"WebSite","@id":"https:\/\/www.safekom.pl\/blog\/#website","url":"https:\/\/www.safekom.pl\/blog\/","name":"SafeKom Blog","description":"Notatki Architekta i in\u017cyniera zwi\u0105zanego rozwi\u0105zaniami on-prem","publisher":{"@id":"https:\/\/www.safekom.pl\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.safekom.pl\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pl-PL"},{"@type":"Organization","@id":"https:\/\/www.safekom.pl\/blog\/#organization","name":"SafeKom Blog","url":"https:\/\/www.safekom.pl\/blog\/","logo":{"@type":"ImageObject","inLanguage":"pl-PL","@id":"https:\/\/www.safekom.pl\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/05\/cropped-logo.png?fit=512%2C512&ssl=1","contentUrl":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/05\/cropped-logo.png?fit=512%2C512&ssl=1","width":512,"height":512,"caption":"SafeKom Blog"},"image":{"@id":"https:\/\/www.safekom.pl\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/safekompl","https:\/\/x.com\/MIwaczuk","https:\/\/www.linkedin.com\/in\/michaliwanczuk\/"]},{"@type":"Person","@id":"https:\/\/www.safekom.pl\/blog\/#\/schema\/person\/fd4cc931b624af4b7353d36d92ba7181","name":"Micha\u0142 Iwa\u0144czuk","image":{"@type":"ImageObject","inLanguage":"pl-PL","@id":"https:\/\/secure.gravatar.com\/avatar\/cc6dda4ee8d21d1f254147e5ee6f5e38881b88a4a12a5774ca42380597e52014?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/cc6dda4ee8d21d1f254147e5ee6f5e38881b88a4a12a5774ca42380597e52014?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/cc6dda4ee8d21d1f254147e5ee6f5e38881b88a4a12a5774ca42380597e52014?s=96&d=mm&r=g","caption":"Micha\u0142 Iwa\u0144czuk"},"description":"Pasjonat komputerowy od zawsze oraz maniak w zakresie sieci, wirtualizacji oraz bezpiecze\u0144stwa IT. Kompetentny in\u017cynier z du\u017cym do\u015bwiadczeniem w realizacji projekt\u00f3w informatycznych i telekomunikacyjnych. Wieloletni administrator IT, kt\u00f3ry utrzymuje systemy informatyczne dostosowuj\u0105c je do wymog\u00f3w biznesowych z zapewnieniem dost\u0119pno\u015bci 24\/7\/365.","url":"https:\/\/www.safekom.pl\/blog\/author\/admin\/"}]}},"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/08\/Paloalto_logo.png?fit=566%2C680&ssl=1","jetpack_shortlink":"https:\/\/wp.me\/p7i9ri-dy","jetpack-related-posts":[{"id":494,"url":"https:\/\/www.safekom.pl\/blog\/cisco\/lab-cisco-ise-join-ad-cz-2\/","url_meta":{"origin":840,"position":0},"title":"LAB – Cisco ISE join AD cz.2","author":"Micha\u0142 Iwa\u0144czuk","date":"02.02.2016","format":false,"excerpt":"W tej cz\u0119\u015bci opisz\u0119 jak ISE pod\u0142\u0105czy\u0107 do Active Directory: Dane domeny: Domena safekom.pl Kontroler Domeny AD01.safekom.pl Logujemy si\u0119 do ISE: przechodzimy do Administration -->\u00a0External Identity Sources wybieramy Active Directory po lewej stronie: Klikamy add w polu Join Point Name - musimy da\u0107 inn\u0105 nazw\u0119 ni\u017c nazwa naszego serwera ISE\u2026","rel":"","context":"W \u201eCisco"","block_context":{"text":"Cisco","link":"https:\/\/www.safekom.pl\/blog\/category\/cisco\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/09\/cisco-logo.png?fit=400%2C300&ssl=1&resize=350%2C200","width":350,"height":200},"classes":[]},{"id":519,"url":"https:\/\/www.safekom.pl\/blog\/cisco\/lab-cisco-ise-aaa-dla-junipera\/","url_meta":{"origin":840,"position":1},"title":"Lab – Cisco ISE – AAA dla Junosa","author":"Micha\u0142 Iwa\u0144czuk","date":"09.02.2016","format":false,"excerpt":"W poprzednich wpisach opisa\u0142em jak zainstalowa\u0107 oraz jak pod\u0142\u0105czy\u0107 do AD ISE. Poni\u017cej opisz\u0119 jak wykorzysta\u0107 ISE jak radius kt\u00f3ry b\u0119dzie serwowa\u0107 u\u017cytkownik\u00f3w do logowania po ssh i www dla urz\u0105dze\u0144 Juniper pod systemem Junos. Jak centralne repozytorium u\u017cytkownik\u00f3w b\u0119dzie s\u0142u\u017cy\u0107 AD. Mam nadziej\u0119 \u017ce komu\u015b si\u0119 przyda. Bierzemy si\u0119\u2026","rel":"","context":"W \u201eCisco"","block_context":{"text":"Cisco","link":"https:\/\/www.safekom.pl\/blog\/category\/cisco\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2016\/02\/Juniper-Networks-and-Cisco-Systems.png?fit=712%2C534&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2016\/02\/Juniper-Networks-and-Cisco-Systems.png?fit=712%2C534&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2016\/02\/Juniper-Networks-and-Cisco-Systems.png?fit=712%2C534&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2016\/02\/Juniper-Networks-and-Cisco-Systems.png?fit=712%2C534&ssl=1&resize=700%2C400 2x"},"classes":[]},{"id":481,"url":"https:\/\/www.safekom.pl\/blog\/cisco\/lab-cisco-ise-2-0-w-labie-cz1\/","url_meta":{"origin":840,"position":2},"title":"LAB – Cisco ISE 2.0 w Labie – cz1","author":"Micha\u0142 Iwa\u0144czuk","date":"02.02.2016","format":false,"excerpt":"Postanowi\u0142em pozna\u0107 co to jest oraz z czym to si\u0119 je - ISE w wersji 2.0. Uda\u0142o mi si\u0119 zdoby\u0107 wersj\u0119 demonstracyjn\u0105 na 90dni z pe\u0142n\u0105 funkcjonalno\u015bci\u0105. \u00a0Poni\u017cej przedstawi\u0119 jak instaluj\u0119 w labie. Importujemy plik ova do Workstation Wybieramy file --> open wybieramy nasz plik ova, poni\u017cej kolejny ju\u017c krok\u2026","rel":"","context":"W \u201eCisco"","block_context":{"text":"Cisco","link":"https:\/\/www.safekom.pl\/blog\/category\/cisco\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/09\/cisco-logo.png?fit=400%2C300&ssl=1&resize=350%2C200","width":350,"height":200},"classes":[]},{"id":41,"url":"https:\/\/www.safekom.pl\/blog\/cisco\/cisco-catalyst-polityka-hasel\/","url_meta":{"origin":840,"position":3},"title":"Cisco catalyst – polityka hase\u0142","author":"Micha\u0142 Iwa\u0144czuk","date":"20.04.2015","format":false,"excerpt":"Ostatnio dosta\u0142em za zadanie ustawienie polityk\u0119 hase\u0142 na Switch'u Cisco poni\u017cej config kt\u00f3ry ustawia polityk\u0119 hase\u0142: aaa new-model aaa authentication login default local aaa authorization exec default local aaa authorization network default local ! aaa common-criteria policy Profil_pass min-length 8 max-length 64 numeric-count 1 upper-case 1 lower-case 1 special-case 1\u2026","rel":"","context":"W \u201eCisco"","block_context":{"text":"Cisco","link":"https:\/\/www.safekom.pl\/blog\/category\/cisco\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":322,"url":"https:\/\/www.safekom.pl\/blog\/palo-alto\/palo-ad-2012-user-maping\/","url_meta":{"origin":840,"position":4},"title":"Palo – AD 2012 user maping","author":"Micha\u0142 Iwa\u0144czuk","date":"20.09.2015","format":false,"excerpt":"Poni\u017cej opis jak pod\u0142\u0105czy\u0107 Palo do AD 2012 w celu pozyskania u\u017cytkownik\u00f3w do Autoryzacji SSH, WEB GUI. Kontroler domeny windows 2012r poziom AD 2012 AD01- 192.168.1.199 User-\u00a0pa-admin-user domena- safekom.pl Konfiguracja Palo: Device --> Server Profiles --> LDAP Gdzie w servers podajemy namiary na kontrolery domeny, w mym przypadku jest to\u2026","rel":"","context":"W \u201eLab"","block_context":{"text":"Lab","link":"https:\/\/www.safekom.pl\/blog\/en\/category\/lab\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/08\/Paloalto_logo.png?fit=566%2C680&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/08\/Paloalto_logo.png?fit=566%2C680&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/08\/Paloalto_logo.png?fit=566%2C680&ssl=1&resize=525%2C300 1.5x"},"classes":[]},{"id":647,"url":"https:\/\/www.safekom.pl\/blog\/lab\/lab_ipsec_palo_ciscoasa\/","url_meta":{"origin":840,"position":5},"title":"LAB –  IPSec Palo – Cisco ASA","author":"Micha\u0142 Iwa\u0144czuk","date":"23.03.2016","format":false,"excerpt":"Poni\u017cej pokazuj\u0119 jak zestawia\u0107 po\u0142\u0105czenie IPsec pomi\u0119dzy PaloAlto Networks a Cisco ASA. W mym przypadku oba urz\u0105dzenia s\u0105 w wersji wirtualnej ale konfiguracja ich odpowiada tak jak by\u015bmy konfigurowali urz\u0105dzenia fizyczne. Za\u0142o\u017cenia: Faza 1 aes256 sha-1 pfs g2 86400s Faza 2 aes256 sha-1 pfs g2 28800s Palo Cisco ASA Sieci\u2026","rel":"","context":"W \u201eCisco"","block_context":{"text":"Cisco","link":"https:\/\/www.safekom.pl\/blog\/category\/cisco\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/08\/Paloalto_logo.png?fit=566%2C680&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/08\/Paloalto_logo.png?fit=566%2C680&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/08\/Paloalto_logo.png?fit=566%2C680&ssl=1&resize=525%2C300 1.5x"},"classes":[]}],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.safekom.pl\/blog\/wp-json\/wp\/v2\/posts\/840","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.safekom.pl\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.safekom.pl\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.safekom.pl\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.safekom.pl\/blog\/wp-json\/wp\/v2\/comments?post=840"}],"version-history":[{"count":0,"href":"https:\/\/www.safekom.pl\/blog\/wp-json\/wp\/v2\/posts\/840\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.safekom.pl\/blog\/wp-json\/wp\/v2\/media\/304"}],"wp:attachment":[{"href":"https:\/\/www.safekom.pl\/blog\/wp-json\/wp\/v2\/media?parent=840"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.safekom.pl\/blog\/wp-json\/wp\/v2\/categories?post=840"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.safekom.pl\/blog\/wp-json\/wp\/v2\/tags?post=840"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}