topic Re: how to make sure I can use AD distribution lists for security policies? in General Topics

how to make sure I can use AD distribution lists for security policies?

SThatipelly — Fri, 13 Sep 2019 14:42:41 GMT

how can I make sure I can use AD distribution lists for security policies?

I am using windows based user-id agent.

Re: how to make sure I can use AD distribution lists for security policies?

OtakarKlier — Fri, 13 Sep 2019 21:14:49 GMT

Hello,

Make sure the agent is getting the logs, you can check on the agent. If using the integrated agent you can still check via cli commands. I try to encorporate AD groups into policies as much as possible and they work great. Also make sure you are populating the 'Group Mapping Settings', Device tab ->User Identification-> Group Mapping settings sub tab.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm5bCAC

Regards,

Re: how to make sure I can use AD distribution lists for security policies?

SThatipelly — Wed, 18 Sep 2019 18:27:59 GMT

@OtakarKlier I use windows based agent. I'm having hard time trying to confirm if it's reading distribution groups. may have to open a ticket with support.

thanks.