topic Re: Active Directory Testing in General Topics

Active Directory Testing

cpatte7372 — Tue, 03 May 2016 18:01:48 GMT

Hello Community,

My first posting here.

I have successfully configured LDAP / Active Directory on my VM ESXi.

My Palo Alto can connect to the AD, see image

However, I don't know how to test to see users in the monitoring logs. I will need a VM to log on to the AD from within the virtual environment but not sure how to do that.

Can someone help?

Cheers

Carlton

Re: Active Directory Testing

cpatte7372 — Tue, 03 May 2016 18:15:24 GMT

Hi,

Basically, I need to be able to log in to the AD from within my virtual environment.

Re: Active Directory Testing

cpatte7372 — Tue, 03 May 2016 18:31:24 GMT

Hi,

Ultimately, I would like to be able to see my test user appear in the following logs under 'Source User'

Cheers

Re: Active Directory Testing

Raido_Rattameister — Tue, 03 May 2016 21:37:31 GMT

Hi,

You can access User-ID resources here: https://live.paloaltonetworks.com/t5/Management-Articles/User-ID-resource-list/ta-p/70379

This step-by-step guide will tell you exactly how to set it up.

If you are in test environment and can use domain admin account then you can skip first 4 steps and jump directly to step 5.

In real environment you want to use account with limited permissions not full blown domain admin.

https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Configure-Agentless-User-ID/ta-p/62122