PAN-Agent Multi Domain and Group membership

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

PAN-Agent Multi Domain and Group membership

Not applicable

Hi,

We have a forest domain with 2 child domains. Now I have 2 pan agents installed for both domains and it's working well.

Now I have the following problem about wich groups to use.

I must use 2 global groups to give users access through the firewall. A global Group from domain A and a Global Group from Domain B. So this means I must administer 2 groups in different domains.

Normally in AD when you use a Domain Local group then you can put users from different domains in this group.

I have done that so I have a Domain Local Group with users from Domain A and B and selected this group in the Policy but no success.

Is it possible to use a domain Local group witch the User-ID feature?

The wish is to administer 1 group instead of 2 groups from both domains.

Many Thanks

Osman Bor

1 REPLY 1

L4 Transporter

Hello Osman,

we may read the users in the domain local group, but we will not create a user to ip mapping for the names that are not part of the domain that the pan agent is configured for.

So using the domain local group with not work as a work around for this.

  • 3715 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!