AD security Groups in Authentication Profile ?

[Karl]

Hi all,

Does anyone know if AD security group are now supported in the Authentication Profile Tab ?

Regards,

Karl.

[ExclusiveNetworksGermany]

Yes,

on my Lab Device with 4.1.7

i can select AD Groups in Auth Profile

But i am pretty sure this even worked in 3.1 and 4.0

Just take care that you configure in PanOS 4.1.x

an LDAP Profile for Groups under:

User Identification - Group Mapping Settings

[Karl]

That's exactly what I did. But it doesn't work for authenticating GlobalProtect clients. I have to specify each of my users 

Regards,

Karl

[mbutt]

Hi Karl,

It might not show in the exact format as shown above in some release but might be in NT format i.e test@GPgroup where test is the domain name and GPgroup is the group name. Please try using this format and let us know if this works or not.

Thank you

mbutt

[Karl]

Hi,

Thanks for your tip, but unfortunately it doesn't work.

Regards,

Karl