user id based security policies

[nash4]

Hello,

We have a 3700D FG as our internal firewall with a Palo Alto as the edge. Palo is setup to do VPN for remote users but we are wanting to configure user ID based security policies between the palo to fortinet. Since the corp apps are behind our internal fw, is there a way that the FG can accept the user ids from palo and process the connection string?

Thank you!

[neonbit]

Not that I know of out of the box. One option is if the VPN users are connecting to the PA via a RADIUS server then the RADIUS server could send RADIUS attributes to the FGT which will then be able to track the users.