Does Adding a Group Mapping Also Add the Users in that Group?

[Abs]

Hi,

I'm wondering, if I were to add an AD group to the Group Mapping pane on the firewall, are all the members of that group also added? Or do I -definitely- need UserID for that?

Thanks,

A.

(Now shamelessly adding the next 49 friend requests.)

[amansour · Accepted solution]

Yes it does.  You will need to check the User-to-IP mapping on the CLI to see if the users are being mapped correctly.  In some cases leaving include groups and the domain on the user identification setting off don't.  Just having it selected in the policy won't work.

[Abs]

Thanks, Champion Knight Amansour!

A.

(Now shamelessly adding the next 49 friend requests.)

[amansour]

Wait is your avatar the one from Half-Life ?

[Abs]

No, it's the default Palo Alto avatar.