topic Traffic not matching policies configured with AD groups and users in General Topics

Traffic not matching policies configured with AD groups and users

stef — Sun, 22 Nov 2020 23:30:57 GMT

Hello all,

i have problem user based policy .

in cli i can see that ip and group mapping is fine .

When i configure the policy the users and groups appears in the drop down and so on, but didn't match the traffic .

Can you give me some suggestions?

Thank you in advance!

Re: Traffic not matching policies configured with AD groups and users

BPry — Mon, 23 Nov 2020 03:11:03 GMT

@stef,

What version of PAN-OS are you running, have you actually committed since creating the policy, and have you tried testing the rule base entry via the CLI test command to verify the policy you configured actually matches the traffic?

Re: Traffic not matching policies configured with AD groups and users

stef — Mon, 23 Nov 2020 06:13:20 GMT

@BPry

i think i fount the problem. I appear that the problem was only whit the GlobalProtect clients and was related to the domain mismatch.

Thank you for the replay !