topic Share User-ID among VSYS in General Topics

Share User-ID among VSYS

raji_toor — Thu, 06 Aug 2020 16:56:33 GMT

How to best share user-id's or ip/User-mapping between different vsys. I want share user to IP-mapping for users connecting through global protect in separate vsys. But i think usecase can be extended to non GP mappings too.

Re: Share User-ID among VSYS

RamprakashRT — Thu, 06 Aug 2020 18:03:55 GMT

Hi @raji_toor ,

Yes this is possible. You need to assign one Vsys as a userid hub ( centralized storage for all the user id ) which can be accessible by other vsys. You can make use of the below link,

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-new-features/user-id-features/shared-user-id-mapping-across-virtual-systems

Try and let me know.

Thanks,

Ram

Re: Share User-ID among VSYS

abmishra — Tue, 12 Jan 2021 14:09:17 GMT

Hi @RamprakashRT

Could you please let me know if this is supported in version 8.X?