User or group

[jdprovine]

Can you add a user group under the user tab in a security policy

[Mick_Ball]

Yes,  with over 9k of users i would struggle with individuals....

i hope i understood the question...

[jdprovine]

@Mick_Ball

I can enter the group but it does not pop up in the drop down so I wasn't sure it could really see the group

[Mick_Ball]

When i select add in the user section of the policy it displays some groups before i type anything, these groups are already added in my group mapping “group include list“.

do you not have any groups in your list, its supposed to speed things up...

[Mick_Ball]

I wouls say no, perhaps you could test this to confirm, but its my understanding that when you place a group in the group include list, the firewall checks every 60 (default) mins to see who is in that group and stores it in its cache, i know this because when a user is added to a group on ad i have to run debug user-id refresh group-mapping to update the group membership cache if i need the mapping urgent...

[OtakarKlier]

Hello,

Also I have noticed that a commit is required from the time the group is added to when you can see it in the pull down menu for a policy.

Hope that helps.

Regards,

[BPry]

@OtakarKlier,

Only if you want it to auto populate or generate in the list. You can still use the fully qualified and it will function at the time of commit.