Usergroup

[fkizhuvara]

We have firewall managed by Panorama and have used security group from Active Directory in the polices.
Want to know where do we check ( panorama or the firewall) the list of groups seen by the firewall and list of users in a group.

And also want to know the cmd for manual sync and do we need to run it on Panorama or Firewall.

[mshekh]

Hi @fkizhuvara ,

Please refer the below kb for your reference and User id information should be checked at firewall. 

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClRyCAK

[fkizhuvara]

That KB is for User ID agent setup,  not what I am looking for.
Below command works on the firewall but not on Panorama.

show user group list

this will display user groups known to the firewall

show user group name " cn of group listed from above (use quotes if you have spaces)"

this will list all known members of that group

[fkizhuvara]

@mshekh 

That KB is for User ID agent setup,  not what I am looking for.
Below command works on the firewall but not on Panorama.

show user group list

this will display user groups known to the firewall

show user group name " cn of group listed from above (use quotes if you have spaces)"

this will list all known members of that group

[fkizhuvara · Accepted solution]

Got a ticket open as per TAC we need to run the command on the firewall.