topic Re: Authentication profiles in General Topics

Authentication profiles

jdprovine — Tue, 19 May 2015 12:58:36 GMT

I am trying to create different globalprotect access. so I want to give access by security groups. When I search for the Users group in AD to add security groups from that they do not show up and I don't know why.

Re: Authentication profiles

lewis — Tue, 19 May 2015 14:16:19 GMT

Are you talking about trying to add a security rule in your policy? If so make sure you have added the AD group to the Group Mapping Settings under User Identification. A commit is required too and sometimes I have found it may even take a few minutes after the commit for it to available to use in a security rule.

Re: Authentication profiles

jdprovine — Tue, 19 May 2015 15:05:43 GMT

No I am talking about the ability to access the globalprotect VPN and restricting it by security group but I am not seeing all the security groups from AD especially the built-in Users container

Re: Authentication profiles

aabdelhali — Tue, 19 May 2015 16:20:57 GMT

jprovine

If your FW is not able to retrieve these AD groups, "Setup => User Identification => Group Mapping" then I would recommend to check mp-log useridd.log to see if there is any errors or group being denied.

Amjad

Re: Authentication profiles

jdprovine — Thu, 21 May 2015 12:38:42 GMT

I resolved it. The issue was the permissions of the Bind user to the Active directory