When l go to authentication profile and select "add" under allow-list for a LDAP connection it does not list all Active Directory Groups from our Domain ?
We are currently on PANOS version : 5.0.3
I also have the User ID Agent setup on both of our Windows 2008 Domain Controllers using version number : 5.0.1-2
Solved! Go to Solution.
See if they are included in one of your group mapping profiles;
Device -> User Identification -> Group Mapping Settings.
Open one of the valid profiles, and see that the groups you're looking for is in the group include list.
Thanks l have basically removed all group listings and now l can see them all.. For some reason specifying a particular OU Group that contained about 50 Groups was not showing them all. But after not specifying no groups in the included list it now shows them all..
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!