topic Re: Source user Questions in General Topics

Source user Questions

eCloud — Thu, 28 Jan 2021 08:22:05 GMT

Hello!
I am a beginner engineer in Japan.
We need to put it in the hundreds of source users policy this time.
Is there any other way than to input one by one?

Re: Source user Questions

BPry — Thu, 28 Jan 2021 16:52:16 GMT

@eCloud,

Can you expand on your question a bit and describe what you are actually trying to accomplish?

Re: Source user Questions

eCloud — Fri, 29 Jan 2021 02:49:35 GMT

@BPry
appreciate sir!

abc100~abc500
I'm trying to create an ACL that allows ID users. I'm typing them in one by one. It's taking too long.
Is there any way?

Re: Source user Questions

BPry — Fri, 29 Jan 2021 16:08:55 GMT

@eCloud,

Are you pulling in group information from your user-id source, or are you using local users?

If you are pulling in user-id information from something like Active Directory, then you would configure Group Mapping and pull in whatever groups you need to utilize. That way you only need to create a group in AD and that group can be used in your firewall rulebase going forward.

If you are using local users, then you are going to want to create a local user group instead of specifying every individual user across your rulebase. This would either be done manually by adding each individual user, or you would script it through SSH/API so that it didn't take as long.

Re: Source user Questions

eCloud — Fri, 05 Feb 2021 10:14:34 GMT

appreciate sir!
unfortunately, I don't have the authority to touch the ad, but thanks to you, I studied a lot.

Re: Source user Questions

OtakarKlier — Fri, 05 Feb 2021 18:05:49 GMT

Hello,

The easiest like BPry mentioned is to use AD groups. Have the AD team create one with the required users. Add the group via the user-id function. Then set your policies to use the AD groups rather than individual users.

Hope that helps.