Phase 3 - Configure

Step 1 - Configuration Optional Built-In Services

If selected in Phase 2, configure the desired built-in service. As a reminder, these are optional and not required for Visibility or Enforcement.

• Configuring DHCP Server
• Configuring RADIUS Enforcement
• Monitoring Switch
• Receiving Events

Step 2 - Configure Features for Grouping, Enforcement and Reporting

If selected in Phase 2, configure the desired features to meet the specific use cases of the deployment. Any feature not selected in Phase 2 may be skipped.

Once all of the desired configurations are completed, they will be used in Phase 4 to Test and Validate use cases.

Create Node Groups to categorize Devices/Users

• Managing Node Groups

Create Tags

• Tagging Nodes

Create Network Objects/Services/Permissions

• Creating Permissions

Create Enforcement Policies

• Creating and Viewing Enforcement Policy for Nodes

Configure AD Integration

• Integrating User Directories

Configure Single-Sign-On (SSO)

• Single Sign-On

Configure Captive Portal

• Authentication using Captive Web Portal

Configure Network Security Automation

• Sending Events
• Integrating Palo Alto Networks Firewall
• Integrating FireEye

Configure Alerting / Reporting

• Managing Reports