About updating AD group membership

Hello guys

1. I configured LDAP profile and update from AD DC

2. AD group named domain-users has about 10900 user

3. Customer created new user and applied new user to domain-users group

So I tried to refresh a group-mapping information by debug command.

best practice User-ID strategy?

Hello,

first I try to give you some information. Our headquarter is located in Germany. All of our subsidiaries are connected to Germany via relatively slow VPN lines. Overall we have round about 20 DCs in different countires. Until now we have only 3

User Groups Seen as Users in Security Policy and new users added to that group are not getting identified.

Hi All,

Model- 2050  and PANOS- 5.0.6

In security policies groups are showed as a single user and any new user added to that group are not getting identified by the PaloAlto firewall. In source user column in policy showing single user icon instead gro

Why does User-ID suddenly stops ?

Hello,

We have a customer who is using PA-3020 in L3 A/P cluster, running PanOS 5.0.2.

We have set up User-ID with PanAgent services (Primary and Secondary) installed on two different servers members of the domain.

User-ID is configured to be based on :

VMWARE view loosing USERID

Thanks in advance for any answers.  I created a Social Media security policy allowing certain users in an AD group to get to specific Social Media sites including Facebook.

The user when logged into the machine is able to get to Facebook with no issue

LDAP not using edirectory

Is there any good documentation for using LDAP in a Linux environment with PANOS 5?

We are having issues getting the firewall to pick up user ID's.

WiFi with 802.1x and Radius authentication - source user in traffic log problem

Hello

I'm thinking about WiFi network for my studnets. Now they are authenticating on HotSpot on Mikrotik AP's. They are complaining that must enter login and password so often.

HotSpot also isn't good for me becase I can't see authenticated users in P

USER ID MAPPING

What will give you better results, User-ID Agents installed on domain controllers, or Server Monitoring from the firewall (agentless)? 

GP client connected to internal GW - no user attached to IP address

Hello all,

I was thinking that when a client is connected via GP to an internal Gateway, the user is mapped to the IP address of the client. In my case, that is not working. The zone in which the client resides has user-ID enabled, but still the traff

Captive Portal authentication as a replacement for Checkpoint Client Auth

Hello,

We're in the process of replacing a number of checkpoint firewalls with Palo Altos and we're looking at ways in which we can replace the current Client-Auth setup on Checkpoint where you telnet to the firewall directly, authenticate, and it the

PANOS 5.0.8 User-ID problem.

Did anyone have a problem with user identification (IP from AD thru User-ID application), I have above with 5.0.8, on 5.0.7 is OK. Users from local subnet are correct discovered, but from other then PA subnets arent.

Regards

Adam