topic Re: I want to ignore to update ip-user-mapping information from other domain. in General Topics

I want to ignore to update ip-user-mapping information from other domain.

KiCheon.Lee — Tue, 29 Oct 2019 01:38:11 GMT

Hi,

My FW is updated ip-user-mapping information from only A DC with a.com.

A DC have been connecting Forest with B DC included b.com.

Sometimes, The FW has been updated users in b.com domain from A DC.

So I want to ignore to update user-ID from A DC for b\users, only allow a\users.

I have tried a way using ignore-list but I want to know a way better or just another.

If you know them, I hope you will help me.

Thanks

Re: I want to ignore to update ip-user-mapping information from other domain.

michelealbrigo — Tue, 29 Oct 2019 08:34:12 GMT

Maybe you can try working on the AD side, e.g. restricting visibility of the B domain for the User-ID AD user? I can't go into details, I do not know AD well enough to tell you if this is even possible, but I'd expect it to be able to do it...

Re: I want to ignore to update ip-user-mapping information from other domain.

VinceM — Tue, 29 Oct 2019 13:05:59 GMT

Hi all,

If it's another domain, for sure, it using an other DHCP scope. Then you just have to configure include/exclude network in User Identification / User Identification menu. Just include the DHCP scope you want to manage.

Rgds