Administrator Guide

612 | Administration Dell Networking W-ClearPass Policy Manager 6.6 | User Guide
You can add multiple endpoint context servers of the same type.
4. Enter the appropriate values for each of the Palo Alto Networks Firewall Add Endpoint Context Server
parameters described in Table 332.
5. When satisfied with the settings, click Save.
Parameter Description
Select Server Type Choose Palo Alto Networks Firewall from the drop-down list.
Server Name Enter a valid server name. You can enter an IP address or a hostname.
Server Base URL Enter the server base URL in the following format:
https://{server_ip}/api/?type=keygen&user={username}&password={password}
Username Enter the username.
Password Enter and verify the password.
Verify Password
Username Transformation Choose one of the following options:
l None: Do not use any username transformation.
l Prefix NetBIOS name: Use the Prefix NetBIOS name in UID updates.
l Use Full Username: Use the full username in UID updates.
GlobalProtect Enable this option to send an HIP report to the firewall. You must enable the
GlobalProtect license on the firewall for this to work.
Send Posture Data Enable to send posture data on the Palo Alto Networks firewall after authentication.
This option can be resource-intensive. The eager handler-polling interval must be
two minutes or more.
Enabling this field verifies whether the polling frequency is set to two minutes and
then sends the posture data to Palo Alto Networks firewall. You can verify the
posture data in the Access Tracker page.
UserID Post URL Enter the user ID post URL in the following format:
https://{server_ip}/api/?type=user-id&action=set&key={key}&cmd={cmd}
Validate Server Enable to validate the server certificate. Checking this option enables the
Certificate tab.
Bypass Proxy Enable to bypass the proxy server.
Table 332: Add Endpoint Context Server: Palo Alto Networks Firewall Parameters