Nested Active Directory Groups

[Anon1]

Can it handle nested Active Directory groups?

Security policy with a group which a user is not direct member of. When user tries connection through firewall then it checks the groups within the group (an so on).

Can it be configured how deep the nesting is checked?

[awarsame]

I have the same question.  Does anybody now the answer?

thanks

[panos]

you mean there is a group inside a group

group1\group2\group3\group4\group5

group5 is member of all 1,2,3,4 groups

so you can write a rule for group5 ????

[awarsame]

no, the other why around, Can write a rule for group1 which has 2,3,4,5 as members and it applies to all of them?

[panos]

yes you can write.

[kprakash]

We can authenticate users and also fetch the group mapping for users that are nested within multiple AD groups. You can also verifiy if  the users nested in these groups are being picked up from the firewall, from the web interface: Device tab-->user identification-->group mapping settings--group include list, + box on the hierarchy being read by the firewall.

When users are nested within hierarchies of groups, you can configure the topmost hierarchy (group 1)  under the policy, and it checks for all the groups nested under it to see if the user belongs under them.