https://live.paloaltonetworks.com/t5/general-topics/user-id-and-globalprotect-user-access/m-p/215798#M62553 <P>Currently I have 2 HA'd 3020 on 8.0.0 code. I have SSL vpn setup using globalprotect with LDAP. Also having implemented User-id for policy access.</P><P>&nbsp;</P><P>All this is working.</P><P>&nbsp;</P><P>My problem is, when users access the network over globalprotect. Those users miss the rules created based on the "domain\user" and are only seen as "user". Now if the user accesses a server, service, drive, etc, the user will then have the correct "domain\user".&nbsp; This then forcing the user to use the correct rule set. But if the users dont access any AD services, they will then be forced to a "non user id" rule.</P><P>&nbsp;</P><P>Is there a way to append the "domain\" to globalprotect users?</P><P>&nbsp;</P><P>Would it be better to just segement globalprotect users? This seems to double the work and a bit mundayne.&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P> Tue, 29 May 2018 22:34:27 GMT k.truex 2018-05-29T22:34:27Z https://live.paloaltonetworks.com/t5/general-topics/user-id-and-globalprotect-user-access/m-p/215798#M62553 <P>Currently I have 2 HA'd 3020 on 8.0.0 code. I have SSL vpn setup using globalprotect with LDAP. Also having implemented User-id for policy access.</P><P>&nbsp;</P><P>All this is working.</P><P>&nbsp;</P><P>My problem is, when users access the network over globalprotect. Those users miss the rules created based on the "domain\user" and are only seen as "user". Now if the user accesses a server, service, drive, etc, the user will then have the correct "domain\user".&nbsp; This then forcing the user to use the correct rule set. But if the users dont access any AD services, they will then be forced to a "non user id" rule.</P><P>&nbsp;</P><P>Is there a way to append the "domain\" to globalprotect users?</P><P>&nbsp;</P><P>Would it be better to just segement globalprotect users? This seems to double the work and a bit mundayne.&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P> Tue, 29 May 2018 22:34:27 GMT https://live.paloaltonetworks.com/t5/general-topics/user-id-and-globalprotect-user-access/m-p/215798#M62553 k.truex 2018-05-29T22:34:27Z https://live.paloaltonetworks.com/t5/general-topics/user-id-and-globalprotect-user-access/m-p/215849#M62559 <P>&nbsp;</P> <P>Adjusting the Username Modifier in the authentication profile will correct this issue</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="auth username modifier.png" style="width: 600px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/15326iA787CAA27D126CEF/image-size/large?v=v2&amp;px=999" role="button" title="auth username modifier.png" alt="auth username modifier.png" /></span></P> Wed, 30 May 2018 07:30:19 GMT https://live.paloaltonetworks.com/t5/general-topics/user-id-and-globalprotect-user-access/m-p/215849#M62559 reaper 2018-05-30T07:30:19Z