Redistribute group mappings?

[djohnson229]

Hi all, my CIE has all group information populated and I have Panorama and 3 firewalls. Can I integrate Panorama with CIE to pull down the group mapping information from CIE and then Panorama share/redistribute these group mappings with the 3 firewalls? Or do I need to configure Panorama and all 3 firewalls to pull this information from CIE directly? In other words, I'm trying to work out if Panorama can redistribute group mappings it receives from CIE with the firewalls....

Thanks

Darren

[aleksandar.astardzhiev]

Hi @djohnson229 ,

As far as I am aware you can use Panorama to redistribute user-to-ip mapping, but not for group mapping.

For user-ip mapping you can redistribute the information from one of the firewalls to the Panorama and let the other firewalls to get user-ip mapping from the panorama (instead  of connecting all firewalls between each others)

But for group  mapping I don't believe it is possible, you will need to connect each firewall to the CIE.