Administrator Guide

338 | Enforcement Dell Networking W-ClearPass Policy Manager 6.5 | User Guide

The following table describes the Session Notification Enforcement - Attributes tab:

Table 188: Session Notification Enforcement - Attributes Tab

Parameter Description

Type

Select from:

l Session-Check

l Session-Notify

Palo Alto integration is extended to Guest MAC Caching use cases. Configure the following:

Session-Check::Username = %{Endpoint:Username}

NOTE: Post Auth sends the Guest username instead of the MAC Address in the user id updates.

For Session-Notify Type attribute, the Name can be Server Type, Server IP, Login Action, or

Logout Action. The values for Server Type can be Generic HTTP, Palo Alto Networks Panorama,

or Palo Alto Networks Firewall. Selecting Server IP for Name provides a choice of

ipaddress/hostnames for corresponding type of server as Value. Once the server IP is selected,

server will be shown as available choices for value).

This enforcement type should be used both for Palo Alto Devices and any Generic HTTP

servers. Pre-6.5 configurations containing Session Restrictions Enforcement profile for Palo

Alto devices (with attribute Session-Check::IP-Address-Change-Notify) will be migrated to this

new enforcement profile during an upgrade (any profiles defined with more than one Palo Alto

device or combined with any other Session Restrictions attributes will not be migrated and need

to re-configured).

Name

The options displayed for the Name attribute depend on the Type attribute that was selected.

Value

The options displayed for the Value attribute depend on the Type attribute and Name attribute

that were selected.

Summary Tab

This tab summarizes the parameters configured in the Summary tab. The following figure displays the

Session Notification Enforcement - Summary tab:

Figure 317: Session Notification Enforcement - Summary Tab

Session Restrictions Enforcement

Use this page to configure profile and attribute parameters for Session Restrictions enforcement profile.