topic Re: Prisma Access - Security Group pull in Prisma Access Discussions

Prisma Access - Security Group pull

Junedshaikh — Fri, 25 Aug 2023 17:35:19 GMT

How do I train Prisma Access to only pull security group and not distribution group from AD?

Thanks,

Re: Prisma Access - Security Group pull

reaper — Wed, 30 Aug 2023 11:31:05 GMT

are you using Cloud Identity Engine or LDAP?

in LDAP you can select which groups to pull, in CIE you can switch from 'dumb' AD integration (pulls everything) to SCIM which allows you to control (from azure or aws or wherever) which groups to sync

Re: Prisma Access - Security Group pull

znazir — Mon, 25 Sep 2023 07:53:08 GMT

You can primarily enforce group sync restriction on source i.e. LDAP Server, Azure, etc., on Prisma, you cannot do it from Prisma right now

Re: Prisma Access - Security Group pull

hpatel11 — Fri, 10 Nov 2023 13:57:11 GMT

Experience with Panorama Management:
We tried CIE for our early deployment, but it broke several times. No RCA from the support team since we don't have access to backend logs. You are completely blind. I don't suggest you use CIE for security groups.
If you are not an Azure shop and have a reliable connection to OnPrem from Prisma, go with LADAP.