About Amaro123

Hello all,   I'm setting up a second authentication domain in GP but I'm not successful trying to authenticate.   The domain DC=domain1,DC=br,DC=local works normally. The new domain DC=domain999,DC=local does not work. When I try to authenticate through it I see in the logs that it failed but it recognized the domain and the IP of the AD.   This new domain I configured in: Device>Server Profiles>LDAP. Then on: Device>Server Profiles>User Identification>Group Mapping Settings Then on:Network>GP>Portals>"vpn_portal">Agent>^vpn_agent">User/User Group Then on:Network>GP>Gateways>"vpn_gtw">Agent>Client Settings   When I insert domain999.local/user.name, my authentication failure and generate these logs:     ... View more

Hello everyone, I am relatively new to Palo Alto solutions and I face a problem that has been going on for over a week. Could anyone help me?   This is the scenario: - I have gateways 01 and 02 for the GlobalProtect. - AD groups called Grupo1 and Grupo2. - Test user named Fred.   When user Fred is in Group1 he has normal access to the environment through the two gateways. When that same user is in Group2 he has normal access only through gateways 01. If you use 02 he does not access anything. I reviewed the LDAP settings but did not find any unique references to the groups I have. What can I not be seeing?   ... View more

Hi all, I'm relatively new to Palo Alto solutions and I run into a problem that I can't find which may be causing the connection to fail.   I have a configured GP gateway and in it I have 3 pools with different subnets. One of these networks cannot access services on the LAN. I see in the logs the access being accepted in the policies but the connection is not established. I revalidated the settings and didn't find what could be a failure. Any idea what it might be? ... View more