topic AD security Groups in Authentication Profile ? in General Topics https://live.paloaltonetworks.com/t5/general-topics/ad-security-groups-in-authentication-profile/m-p/39281#M28820 <HTML><HEAD></HEAD><BODY><P>Hi all,</P><P></P><P>Does anyone know if AD security group are now supported in the Authentication Profile Tab ?</P><P></P><P>Regards,</P><P>Karl.</P></BODY></HTML> Tue, 18 Sep 2012 09:55:24 GMT Karl 2012-09-18T09:55:24Z AD security Groups in Authentication Profile ? https://live.paloaltonetworks.com/t5/general-topics/ad-security-groups-in-authentication-profile/m-p/39281#M28820 <HTML><HEAD></HEAD><BODY><P>Hi all,</P><P></P><P>Does anyone know if AD security group are now supported in the Authentication Profile Tab ?</P><P></P><P>Regards,</P><P>Karl.</P></BODY></HTML> Tue, 18 Sep 2012 09:55:24 GMT https://live.paloaltonetworks.com/t5/general-topics/ad-security-groups-in-authentication-profile/m-p/39281#M28820 Karl 2012-09-18T09:55:24Z Re: AD security Groups in Authentication Profile ? https://live.paloaltonetworks.com/t5/general-topics/ad-security-groups-in-authentication-profile/m-p/39282#M28821 <HTML><HEAD></HEAD><BODY><P>Yes,</P><P></P><P>on my Lab Device with 4.1.7</P><P>i can select AD Groups in Auth Profile</P><P>But i am pretty sure this even worked in 3.1 and 4.0</P><P>Just take care that you configure in PanOS 4.1.x</P><P>an LDAP Profile for Groups under:</P><P>User Identification - Group Mapping Settings</P><P></P><P><IMG alt="" class="jiveImage" src="https://live.paloaltonetworks.com/legacyfs/online/4057_pastedImage_0.png" style="width: 602px; height: 511px;" /></P><P></P><P></P><P><IMG alt="" class="jiveImage" src="https://live.paloaltonetworks.com/legacyfs/online/4058_pastedImage_1.png" style="width: 631px; height: 415px;" /></P></BODY></HTML> Tue, 18 Sep 2012 10:07:50 GMT https://live.paloaltonetworks.com/t5/general-topics/ad-security-groups-in-authentication-profile/m-p/39282#M28821 ExclusiveNetworksGermany 2012-09-18T10:07:50Z Re: AD security Groups in Authentication Profile ? https://live.paloaltonetworks.com/t5/general-topics/ad-security-groups-in-authentication-profile/m-p/39283#M28822 <HTML><HEAD></HEAD><BODY><P>That's exactly what I did. But it doesn't work for authenticating GlobalProtect clients. I have to specify each of my users&nbsp; <img id="smileysad" class="emoticon emoticon-smileysad" src="https://live.paloaltonetworks.com/i/smilies/16x16_smiley-sad.png" alt="Smiley Sad" title="Smiley Sad" /></P><P></P><P>Regards,</P><P>Karl</P></BODY></HTML> Tue, 18 Sep 2012 13:25:09 GMT https://live.paloaltonetworks.com/t5/general-topics/ad-security-groups-in-authentication-profile/m-p/39283#M28822 Karl 2012-09-18T13:25:09Z Re: AD security Groups in Authentication Profile ? https://live.paloaltonetworks.com/t5/general-topics/ad-security-groups-in-authentication-profile/m-p/39284#M28823 <HTML><HEAD></HEAD><BODY><P>Hi Karl, </P><P></P><P>It might not show in the exact format as shown above in some release but might be in NT format i.e test@GPgroup where test is the domain name and GPgroup is the group name. Please try using this format and let us know if this works or not. </P><P>Thank you </P><P>mbutt</P></BODY></HTML> Tue, 18 Sep 2012 21:58:54 GMT https://live.paloaltonetworks.com/t5/general-topics/ad-security-groups-in-authentication-profile/m-p/39284#M28823 mbutt 2012-09-18T21:58:54Z Re: AD security Groups in Authentication Profile ? https://live.paloaltonetworks.com/t5/general-topics/ad-security-groups-in-authentication-profile/m-p/39285#M28824 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>Thanks for your tip, but unfortunately it doesn't work.</P><P></P><P>Regards,</P><P>Karl</P></BODY></HTML> Wed, 19 Sep 2012 09:19:30 GMT https://live.paloaltonetworks.com/t5/general-topics/ad-security-groups-in-authentication-profile/m-p/39285#M28824 Karl 2012-09-19T09:19:30Z