topic Re: Internal gateway... how to share user information? in GlobalProtect Discussions

Internal gateway... how to share user information?

CharlesKoh — Tue, 07 Jul 2020 09:46:42 GMT

Hi, if i have a couple of internal gateways (A B C) deployed. When an user authenticated successfully to A, the firewall will get its user-id "xxxx@yyy.com"... how do i share this user-id info to gateway B and C, so that they will be able to map IP - user-ID info?

Else the firewall policies i have will only works on A and not on B/C gateways.

Thankyou

Re: Internal gateway... how to share user information?

OwenFuller — Wed, 08 Jul 2020 18:33:54 GMT

You need to enable User-ID redistribution.
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/user-id/deploy-user-id-in-a-large-scale-network/redistribute-user-mappings-and-authentication-timestamps/configure-user-id-redistribution
https://docs.paloaltonetworks.com/panorama/9-0/panorama-admin/panorama-overview/user-id-redistribution-using-panorama

Re: Internal gateway... how to share user information?

CharlesKoh — Thu, 09 Jul 2020 02:09:56 GMT

Thanks a lot 🙂