topic Re: Best or recommended way to connect PA to Windows Domain in General Topics

Best or recommended way to connect PA to Windows Domain

tormodhope — Wed, 09 Apr 2014 09:11:37 GMT

What is the recommended way to connect a PA box to a windows domain?

I see know there is a radius way of doing it, and i know this is the way other like to configure it.

But there is alot more work configuring, and reconfiguring if i want to change/add any groups or access.

Is there a reason we should not use Kerberos or LDAP?

_slv_ — Thu, 10 Apr 2014 08:07:33 GMT

I'm using agent User-id like most of us, so for start I recomendate this option.

Regards

Slawek

tormodhope — Thu, 10 Apr 2014 09:04:36 GMT

That describes the LDAP way, and this is the way i have testet the most.

The reason for connecting to a domain is to authenticate users for GlobalProtect, and to give access to different resources from domain groups.

_slv_ — Thu, 10 Apr 2014 11:05:25 GMT

Yes, but why You think about other posibilities if You are using Microsoft AD?

Radius/Kerberos IMHO is dedicated in tother scenario.

Regards

Slawek