topic Re: Prisma Access and LDAP Group Mapping with Directory Sync Agent in Prisma Access Discussions

Prisma Access and LDAP Group Mapping with Directory Sync Agent

kellysalinas1 — Mon, 18 Jan 2021 00:35:19 GMT

Hello,

I'm trying to implement group-based policies in a standalone Prisma Access deployment. I'm working only with Prisma for Remote Networks. For this purpose I have enabled a Directory Sync Agent to retrieve groups from LDAP Server but Prisma don't have connection to Active Directory so we don't have LDAP Server Profile yet. I need to confirm if it's necessary configure LDAP Server Profile, User-ID Agent, to get group-based policies and user information in the reports and if it's possible enable it through Directory Sync Service?

Re: Prisma Access and LDAP Group Mapping with Directory Sync Agent

ydhanuka — Fri, 09 Apr 2021 03:32:17 GMT

Hi @kellysalinas1

This should be possible to do without LDAP and directory sync is going to pull the users/groups mapping bases on what groups are configured in the security policy.

For the IP-user mapping, however, you might need a user ID agent since it is remote network and there is no GP.

Hope this helps,

Yogesn