topic Re: Group mapping settings not listing AD groups in GUI in General Topics

Group mapping settings not listing AD groups in GUI

MGRashmi — Wed, 25 Sep 2019 10:22:09 GMT

Hi,

I am trying to configure user-id based authentication in Palo Alto 5220 (Pan OS 9.0.2). I have integrated Palo Alto with AD using LDAP profile. I am not able to add the AD groups in the "Group Include" list as they are not being listed in the GUI. I am using panorama to manage the firewall. However, i am able to view the groups in CLI of the firewall if i give the command "show user group list" lists all the AD groups in CLI. Also, i am able to view the "user-ip" mapping in CLI. However, i am not able to select groups in GUI under "Group mapping" and security policies. Please suggest.

Re: Group mapping settings not listing AD groups in GUI

Mick_Ball — Wed, 25 Sep 2019 11:06:02 GMT

@MGRashmi , Hi.

In Panorama you need to list a "Master Device" at the bottom of your device group page.

Re: Group mapping settings not listing AD groups in GUI

Mick_Ball — Wed, 25 Sep 2019 11:09:39 GMT

Re: Group mapping settings not listing AD groups in GUI

MGRashmi — Wed, 25 Sep 2019 11:47:10 GMT

Hi,

Thanks for your response. Master device is already mentioned in the Panorama, still the group list is empty.

Re: Group mapping settings not listing AD groups in GUI

Mick_Ball — Wed, 25 Sep 2019 12:31:42 GMT

I think the group mapping stuff is only visible if they were already active when imported to Panorama.

if you are adding groups from scratch you may need to follow this.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClIOCA0