Search GlobalProtect Users on Portal and Satellites

Reply
Highlighted
L2 Linker

Search GlobalProtect Users on Portal and Satellites

I have several satellites and one portal.  I have a lot users connected to the satellites and portal.  

 

From a CLI console, I would like to query for GlobalProtect users from a centralized console.  Right now, it is a pain because I have to open a CLI console for each satellite/portal and send a command to each device to find information on a specific user.

 

Any ideas on how I could just have a single console to query for a given globalprotect user?

 

Thanks!


Accepted Solutions
Highlighted
L4 Transporter

Are you refering to global protect gateways? I think that satellites are from PAN to PAN devices. Anyway I think you can configure all your remote firewalls (gateways) as "redistributors" and collect the user-ID information from the central firewall where you'll be able to see the user-ID information from the remote firewalls.

 

https://www.paloaltonetworks.com/documentation/60/pan-os/pan-os/user-id/configure-a-firewall-to-shar...

https://live.paloaltonetworks.com/t5/Learning-Articles/GlobalProtect-Users-Appear-as-Coming-From-Use...

 

Regards,

Gerardo

View solution in original post


All Replies
Highlighted
L4 Transporter

Are you refering to global protect gateways? I think that satellites are from PAN to PAN devices. Anyway I think you can configure all your remote firewalls (gateways) as "redistributors" and collect the user-ID information from the central firewall where you'll be able to see the user-ID information from the remote firewalls.

 

https://www.paloaltonetworks.com/documentation/60/pan-os/pan-os/user-id/configure-a-firewall-to-shar...

https://live.paloaltonetworks.com/t5/Learning-Articles/GlobalProtect-Users-Appear-as-Coming-From-Use...

 

Regards,

Gerardo

View solution in original post

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!