LDAP Members in group Issue

SteveHolzman — Sat, 10 Dec 2022 16:10:14 GMT

Issues with Members in a group and a security policy

- pa 850/9.15 os level

- I use ldap to sync with AD , I merged the groups I need in the include group option

- I see all the groups in cli by using show groups

- I can also list members in the group from cli ,

- I use Kerbose to sycn user id's and they also show up in the userid /monitor..

- If I put in a security policy by an AD group name as parameter to apply to a group "A", it fails to execute and drops through to a lower rule.

- If I put a user who exists in group "A" in the rule same rule , the rule works for the user only,..,

- In essence, the firewall knows about the groups and the users, but the security rule it doesn't seem to understand about that user inside the group

- When I use the cli to list the user group A , it lists of the members.

Re: LDAP Members in group Issue

SteveHolzman — Sat, 10 Dec 2022 16:17:42 GMT

It seems as if I solved my own laziness..

I originally cloned an existing rule, and modified it..

When I started a new rule using the group , it now works..