https://live.paloaltonetworks.com/t5/general-topics/overlapping-globalprotect-portal-agent-config-ad-groups/m-p/295782#M77888 <P>Hi <a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/59122">@Sec101</a>&nbsp;</P><P>Yes, the list is read top down.</P> Fri, 01 Nov 2019 21:41:16 GMT Remo 2019-11-01T21:41:16Z https://live.paloaltonetworks.com/t5/general-topics/overlapping-globalprotect-portal-agent-config-ad-groups/m-p/295772#M77887 <P>Does anyone know how Palo treats overlapping Active directory groups for portal agent configs?&nbsp; Is the list read top down for handing out configurations to the agent if a user exists in multiple groups identified by the portal?</P> Fri, 01 Nov 2019 21:18:51 GMT https://live.paloaltonetworks.com/t5/general-topics/overlapping-globalprotect-portal-agent-config-ad-groups/m-p/295772#M77887 Sec101 2019-11-01T21:18:51Z https://live.paloaltonetworks.com/t5/general-topics/overlapping-globalprotect-portal-agent-config-ad-groups/m-p/295782#M77888 <P>Hi <a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/59122">@Sec101</a>&nbsp;</P><P>Yes, the list is read top down.</P> Fri, 01 Nov 2019 21:41:16 GMT https://live.paloaltonetworks.com/t5/general-topics/overlapping-globalprotect-portal-agent-config-ad-groups/m-p/295782#M77888 Remo 2019-11-01T21:41:16Z