topic Re: Nested Active Directory Groups in General Topics

Nested Active Directory Groups

Anon1 — Thu, 25 Oct 2012 16:49:50 GMT

Can it handle nested Active Directory groups?

Security policy with a group which a user is not direct member of. When user tries connection through firewall then it checks the groups within the group (an so on).

Can it be configured how deep the nesting is checked?

Re: Nested Active Directory Groups

awarsame — Thu, 20 Jun 2013 14:33:48 GMT

I have the same question. Does anybody now the answer?

thanks

Re: Nested Active Directory Groups

Retired Member — Fri, 21 Jun 2013 08:34:11 GMT

you mean there is a group inside a group

group1\group2\group3\group4\group5

group5 is member of all 1,2,3,4 groups

so you can write a rule for group5 ????

Re: Nested Active Directory Groups

awarsame — Mon, 24 Jun 2013 12:40:32 GMT

no, the other why around, Can write a rule for group1 which has 2,3,4,5 as members and it applies to all of them?

Re: Nested Active Directory Groups

Retired Member — Mon, 24 Jun 2013 13:40:22 GMT

yes you can write.

Re: Nested Active Directory Groups

kprakash — Mon, 24 Jun 2013 14:17:23 GMT

We can authenticate users and also fetch the group mapping for users that are nested within multiple AD groups. You can also verifiy if the users nested in these groups are being picked up from the firewall, from the web interface: Device tab-->user identification-->group mapping settings--group include list, + box on the hierarchy being read by the firewall.

When users are nested within hierarchies of groups, you can configure the topmost hierarchy (group 1) under the policy, and it checks for all the groups nested under it to see if the user belongs under them.