topic Re: Redistribute group mappings? in Cloud Identity Engine Discussions

Redistribute group mappings?

djohnson229 — Tue, 02 Jul 2024 23:58:39 GMT

Hi all, my CIE has all group information populated and I have Panorama and 3 firewalls. Can I integrate Panorama with CIE to pull down the group mapping information from CIE and then Panorama share/redistribute these group mappings with the 3 firewalls? Or do I need to configure Panorama and all 3 firewalls to pull this information from CIE directly? In other words, I'm trying to work out if Panorama can redistribute group mappings it receives from CIE with the firewalls....

Thanks

Darren

Re: Redistribute group mappings?

aleksandar.astardzhiev — Wed, 21 Aug 2024 15:39:39 GMT

Hi @djohnson229 ,

As far as I am aware you can use Panorama to redistribute user-to-ip mapping, but not for group mapping.

For user-ip mapping you can redistribute the information from one of the firewalls to the Panorama and let the other firewalls to get user-ip mapping from the panorama (instead of connecting all firewalls between each others)

But for group mapping I don't believe it is possible, you will need to connect each firewall to the CIE.