Query on how to to use filtering or search scope

[FarzanaMustafa]

We are using PA-850.

We are constantly getting alert: Error for user group count exceeds 1000 threshold.

We understand the error is due to hardware limitation of the PA model and it is restricted to 1,000 AD groups.

We would like to know how to use filtering or search scope so the Palo Alto device is no looking at the entire AD.

[kiwi · Accepted solution]

Hi @FarzanaMustafa ,

I guess you're looking for this:

How To use Group Filters when Configuring LDAP 

Cheers,

-Kiwi.

[FarzanaMustafa]

Hi @kiwi 

Thank you for the link.

What I was wondering is if there is a way I can tell what groups are being used by the Palo Alto device so I know what groups I should filter by?