topic Re: User or group in General Topics

User or group

jdprovine — Thu, 12 Jul 2018 15:38:06 GMT

Can you add a user group under the user tab in a security policy

Re: User or group

Mick_Ball — Thu, 12 Jul 2018 16:24:24 GMT

Yes, with over 9k of users i would struggle with individuals....

i hope i understood the question...

Re: User or group

jdprovine — Thu, 12 Jul 2018 16:37:43 GMT

@Mick_Ball

I can enter the group but it does not pop up in the drop down so I wasn't sure it could really see the group

Re: User or group

Mick_Ball — Thu, 12 Jul 2018 17:07:53 GMT

When i select add in the user section of the policy it displays some groups before i type anything, these groups are already added in my group mapping “group include list“.

do you not have any groups in your list, its supposed to speed things up...

Re: User or group

Mick_Ball — Thu, 12 Jul 2018 17:35:17 GMT

I wouls say no, perhaps you could test this to confirm, but its my understanding that when you place a group in the group include list, the firewall checks every 60 (default) mins to see who is in that group and stores it in its cache, i know this because when a user is added to a group on ad i have to run debug user-id refresh group-mapping to update the group membership cache if i need the mapping urgent...

Re: User or group

OtakarKlier — Mon, 16 Jul 2018 21:44:39 GMT

Hello,

Also I have noticed that a commit is required from the time the group is added to when you can see it in the pull down menu for a policy.

Hope that helps.

Regards,

Re: User or group

BPry — Mon, 16 Jul 2018 21:55:47 GMT

@OtakarKlier,

Only if you want it to auto populate or generate in the list. You can still use the fully qualified and it will function at the time of commit.