authentication profile LDAP

[acmi]

Hi,

When l go to authentication profile and select "add" under allow-list for a LDAP connection it does not list all Active Directory Groups from our Domain ?

We are currently on PANOS version : 5.0.3

I also have the User ID Agent setup on both of our Windows 2008 Domain Controllers using version number : 5.0.1-2

[panos]

you see all groups on group mapping tab ?

[apasupulati · Accepted solution]

Please refer to the article below to see if user groups are being retrieved on the firewall,

Thanks,

Aditi

[as-mg]

See if they are included in one of your group mapping profiles;

Device -> User Identification -> Group Mapping Settings.

Open one of the valid profiles, and see that the groups you're looking for is in the group include list.

[acmi]

Thanks l have basically removed all group listings and now l can see them all..  For some reason specifying a particular OU Group that contained about 50 Groups was not showing them all.  But after not specifying no groups in the included list it now shows them all..