<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Multi AD groups for Global Protect access in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/multi-ad-groups-for-global-protect-access/m-p/33526#M24596</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hello again,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I found it. Under authentication profiles for the "VPN_Users" I needed to add the AD group there as well.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thanks,&lt;/P&gt;&lt;P&gt;Doug&lt;/P&gt;&lt;P&gt;&lt;BR /&gt; &lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Fri, 12 Jul 2013 13:37:55 GMT</pubDate>
    <dc:creator>ParishSoftIT</dc:creator>
    <dc:date>2013-07-12T13:37:55Z</dc:date>
    <item>
      <title>Multi AD groups for Global Protect access</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/multi-ad-groups-for-global-protect-access/m-p/33525#M24595</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;&lt;IMG alt="Capture.PNG" class="jive-image-thumbnail jive-image" src="https://live.paloaltonetworks.com/legacyfs/online/7246_Capture.PNG" width="450" /&gt;&lt;/P&gt;&lt;P&gt;Hi All,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I have a Global Protect access question for group. I have given access rights to a VPN user group and assigned the AD membership that almost all of our staff is a member of to it and its been working well. Now I need to add a second AD security group for our development contractors. I added the group they are all members of to the User/User Group for the client config of the Global Protect portal but it doesn;t seem to be reading it. my main group still works but the new one does not.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I assummed that the groups in here are either / or, so it would authenticate AD users that are members of either group listed so all I needed to do was include that group and they would then also have access. Did I miss something else?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Long term I plan to put them on their own portal with limited network routing, but for now I just need to get them in the door without adding them to the main staff security group.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thanks in advance for any help.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Doug&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Fri, 12 Jul 2013 13:18:27 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/multi-ad-groups-for-global-protect-access/m-p/33525#M24595</guid>
      <dc:creator>ParishSoftIT</dc:creator>
      <dc:date>2013-07-12T13:18:27Z</dc:date>
    </item>
    <item>
      <title>Re: Multi AD groups for Global Protect access</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/multi-ad-groups-for-global-protect-access/m-p/33526#M24596</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hello again,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I found it. Under authentication profiles for the "VPN_Users" I needed to add the AD group there as well.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thanks,&lt;/P&gt;&lt;P&gt;Doug&lt;/P&gt;&lt;P&gt;&lt;BR /&gt; &lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Fri, 12 Jul 2013 13:37:55 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/multi-ad-groups-for-global-protect-access/m-p/33526#M24596</guid>
      <dc:creator>ParishSoftIT</dc:creator>
      <dc:date>2013-07-12T13:37:55Z</dc:date>
    </item>
  </channel>
</rss>

