group-based policies for RADIUS authenticated users.

[Carracido]

Dear community,

For users who authenticate via RADIUS on Active Directory, is there any possibility to fetch the groups for those RADIUS users so that group-based policies can be created in the firewall? 

Thank you!

[OtakarKlier]

Hello,

I think this might be what you are looking for:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000POFXCA4

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CluUCAS

Regards,

[Carracido]

Hi @OtakarKlier ,

Many thanks for your answer.

What I´m trying to do is to retrieve the group membership for RADIUS authenticated users in the AD. So that I can use the groups in the policies.

I´m trying to do a group mapping in some way like you do through LDAP.

Is this possible?

Thank you in advance!

[OtakarKlier]

Hello,

Yes this is possible.

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/authentication/configure-ldap-authenticat...

Regards,