Navigation Permits Expire - AD Groups

[Alcs_altamirano]

I recently implemented a policy that allows certain users who belong to a group in my Active Directory to go online. It seems to work well but after a while users report not being able to browse even if the LAN connection is maintained. The funny thing is that if you reboot the PC or simply block and unblock using the AD account the permissions are restored.

I would be grateful if I could get your help.

[akurt · Accepted solution]

I believe what you are looking for is this: Configure Cache Timeouts for User Mapping Entries 

It sounds like your users are timing out,and without them logging in again in one form or another, the User-ID mapping is not restored. Double check the "User Identification Timeout (min)" value.

[Alcs_altamirano · Accepted solution]

Increase the timeout a bit, see how it behaves and play around with the AD policy to block the PC before the cache time runs out.

Thank you

[kgopichand]

@Alcs_altamirano 

I would recommend to start troubleshooting by capturing packets on the firewall and based on what you find in the packet capture , the troubleshooting would have to evolve from there.

If you still need help , I would recommend to open a support ticket.

Kavi

[Alcs_altamirano]

Ok gracias por el consejo.