topic Re: Globalprotect vpn access permissions in General Topics https://live.paloaltonetworks.com/t5/general-topics/globalprotect-vpn-access-permissions/m-p/6819#M5005 <HTML><HEAD></HEAD><BODY><P>But this seems to only apply to security groups you can't use an ou group</P></BODY></HTML> Fri, 15 May 2015 19:19:06 GMT jdprovine 2015-05-15T19:19:06Z Globalprotect vpn access permissions https://live.paloaltonetworks.com/t5/general-topics/globalprotect-vpn-access-permissions/m-p/6813#M4999 <HTML><HEAD></HEAD><BODY><P>I want to give different access permission to different group when they access the network using the globalprotect vpn client. I have it configured but its now allowing me to pick the specific group that I want the access for</P></BODY></HTML> Fri, 15 May 2015 17:58:06 GMT https://live.paloaltonetworks.com/t5/general-topics/globalprotect-vpn-access-permissions/m-p/6813#M4999 jdprovine 2015-05-15T17:58:06Z Re: Globalprotect vpn access permissions https://live.paloaltonetworks.com/t5/general-topics/globalprotect-vpn-access-permissions/m-p/6814#M5000 <HTML><HEAD></HEAD><BODY><P>Navigate to Device &gt; User Identification &gt; Group Mapping and add the group that you want in the Group Include List. You can use the User-ID agent installed on the server as an LDAP proxy or manually configure an LDAP server. </P></BODY></HTML> Fri, 15 May 2015 19:09:44 GMT https://live.paloaltonetworks.com/t5/general-topics/globalprotect-vpn-access-permissions/m-p/6814#M5000 rburgoyne_gci 2015-05-15T19:09:44Z Re: Globalprotect vpn access permissions https://live.paloaltonetworks.com/t5/general-topics/globalprotect-vpn-access-permissions/m-p/6815#M5001 <HTML><HEAD></HEAD><BODY><P>I tried to do that but the group I wanted to add didn't show up as a choice. so if there are no groups chose does that mean nothing from ad is being used? </P></BODY></HTML> Fri, 15 May 2015 19:12:19 GMT https://live.paloaltonetworks.com/t5/general-topics/globalprotect-vpn-access-permissions/m-p/6815#M5001 jdprovine 2015-05-15T19:12:19Z Re: Globalprotect vpn access permissions https://live.paloaltonetworks.com/t5/general-topics/globalprotect-vpn-access-permissions/m-p/6816#M5002 <HTML><HEAD></HEAD><BODY><P>You can verify that its working correctly by using the command in the CLI as an example </P><P></P><P>show user group list </P><P>show user group name "test\test test"&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </P></BODY></HTML> Fri, 15 May 2015 19:13:39 GMT https://live.paloaltonetworks.com/t5/general-topics/globalprotect-vpn-access-permissions/m-p/6816#M5002 rburgoyne_gci 2015-05-15T19:13:39Z Re: Globalprotect vpn access permissions https://live.paloaltonetworks.com/t5/general-topics/globalprotect-vpn-access-permissions/m-p/6817#M5003 <HTML><HEAD></HEAD><BODY><P>Like the dropdown list doesn't show all the groups? You may have to just filter it in the top portion or add it via cli. </P></BODY></HTML> Fri, 15 May 2015 19:15:02 GMT https://live.paloaltonetworks.com/t5/general-topics/globalprotect-vpn-access-permissions/m-p/6817#M5003 rburgoyne_gci 2015-05-15T19:15:02Z Re: Globalprotect vpn access permissions https://live.paloaltonetworks.com/t5/general-topics/globalprotect-vpn-access-permissions/m-p/6818#M5004 <HTML><HEAD></HEAD><BODY><P>What do you mean by working correctly? What am I going to see? </P></BODY></HTML> Fri, 15 May 2015 19:15:46 GMT https://live.paloaltonetworks.com/t5/general-topics/globalprotect-vpn-access-permissions/m-p/6818#M5004 jdprovine 2015-05-15T19:15:46Z Re: Globalprotect vpn access permissions https://live.paloaltonetworks.com/t5/general-topics/globalprotect-vpn-access-permissions/m-p/6819#M5005 <HTML><HEAD></HEAD><BODY><P>But this seems to only apply to security groups you can't use an ou group</P></BODY></HTML> Fri, 15 May 2015 19:19:06 GMT https://live.paloaltonetworks.com/t5/general-topics/globalprotect-vpn-access-permissions/m-p/6819#M5005 jdprovine 2015-05-15T19:19:06Z Re: Globalprotect vpn access permissions https://live.paloaltonetworks.com/t5/general-topics/globalprotect-vpn-access-permissions/m-p/6820#M5006 <HTML><HEAD></HEAD><BODY><P>I think the user group that I need it to read from is the users container in ad</P></BODY></HTML> Fri, 15 May 2015 19:20:28 GMT https://live.paloaltonetworks.com/t5/general-topics/globalprotect-vpn-access-permissions/m-p/6820#M5006 jdprovine 2015-05-15T19:20:28Z Re: Globalprotect vpn access permissions https://live.paloaltonetworks.com/t5/general-topics/globalprotect-vpn-access-permissions/m-p/6821#M5007 <HTML><HEAD></HEAD><BODY><P><A _jive_internal="true" href="https://live.paloaltonetworks.com/docs/DOC-4994">https://live.paloaltonetworks.com/docs/DOC-4994</A></P><P></P><P>I found this document that might be helpful, not sure why you're not seeing the proper group but you might be correct. We only use security groups for this since they are purpose built in our organization so it works out well. </P></BODY></HTML> Fri, 15 May 2015 19:38:13 GMT https://live.paloaltonetworks.com/t5/general-topics/globalprotect-vpn-access-permissions/m-p/6821#M5007 rburgoyne_gci 2015-05-15T19:38:13Z Re: Globalprotect vpn access permissions https://live.paloaltonetworks.com/t5/general-topics/globalprotect-vpn-access-permissions/m-p/6822#M5008 <HTML><HEAD></HEAD><BODY><P>The guy you originally configured it set it to try to look at an OU, when I changed it to look at a security group then it worked</P></BODY></HTML> Mon, 18 May 2015 15:05:19 GMT https://live.paloaltonetworks.com/t5/general-topics/globalprotect-vpn-access-permissions/m-p/6822#M5008 jdprovine 2015-05-18T15:05:19Z