Global Protect User Groups

Reply
Highlighted
L4 Transporter

Global Protect User Groups

I want to user map configuration to AD user group for Global Protect clientless VPN. This works quite will if authentication is LDAP.
Have you any idea how can I get it to work with Radius authentication?  Presuming that the user has the same name as the LDAP user, would they be matched to the relevant AD group?


Accepted Solutions
Highlighted
Cyber Elite

I would believe so.

 

I am of the opinion that you are confusing (respectfully) WHAT group a user is a member of vs HOW the user Authenticates.

 

If the Radius server says the person is authenticated... then he is authenticated... it is the LDAP Grouping that determines what configuration the user will be mapped to.

 

Excellent question.

 

What other questions do you have?

 

Thanks.

Help the community: Like helpful comments and mark solutions

View solution in original post


All Replies
Highlighted
Cyber Elite

I would believe so.

 

I am of the opinion that you are confusing (respectfully) WHAT group a user is a member of vs HOW the user Authenticates.

 

If the Radius server says the person is authenticated... then he is authenticated... it is the LDAP Grouping that determines what configuration the user will be mapped to.

 

Excellent question.

 

What other questions do you have?

 

Thanks.

Help the community: Like helpful comments and mark solutions

View solution in original post

Highlighted
L7 Applicator

By default... no.

the user fred smiff will not be the same as group member domain\fred smiff.

 

for this to work you need to add the domain name into the authentication profile.

Highlighted
Cyber Elite

@MickBall   Agreed.

 

I am making presumption that access to the clientless VPN is based on AD groups, and Auth Profile should already have the correct domain listed. 

 

Thanks for confirming! 

 

steve

Help the community: Like helpful comments and mark solutions
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!