topic Re: how to browse for adding specific AD group in LDAP authentication. in General Topics

how to browse for adding specific AD group in LDAP authentication.

willstech — Thu, 12 Apr 2012 14:02:07 GMT

Hi..

Customer would like to use SSL VPN with Active-Directory.

So, I have configured SSL VPN with LDAP Authentication.

There was no problem to connect SSL VPN with LDAP Authentication.
after verify SSL VPN connection, I was going to add some specific group to LDAP authentication in Authentication profile.

But I cannot browse Active-Directory group in LDAP authentication.

Surely, I’m not installed any user agents including AD-Agent and LDAP agent.

do i must install a user-agent, If I am going to add some specific AD group through browse in LDAP Authentication?

Thanks,

Eugene.

Re: how to browse for adding specific AD group in LDAP authentication.

sjamaluddin — Mon, 16 Apr 2012 18:00:41 GMT

If you are using PAN OS v.4.1.x the PAN Firewall should be able to pull group information directly from the AD

To check the groups you can go to:

Device>>UserID>>Group Mapping and if the LDAP is configured correctly, then you should be able to pull the groups there.

Also these groups should show up in the Authentication Profile section.

If however, you are using PAN OS 4.0, or earlier, the group information is pulled from a UserID / PAN Agent so then, yes you would require an Agent running on a domain controller to be able to transfer groups over to the PAN Firewall.