About JaviHernandez

@BPry I found what you meant and it works very good, thanks a lot for the quick and accurate response. ... View more

Thanks a lot for the answer.   I assume you're referring to the filter under "custom group", is that correct? If so, wouldn't that bundle all users inside all the AD groups that start with cn=app-palo-* into one single group? I want to still keep the AD groups as single entities, but I don't want to update the firewall local config or the panorama network/device template every time i create an AD group. ... View more

Hi,   I would like to request the possibility to pull all AD groups under one OU. We're big on userID based firewall rules, and the AD groups are used for authorization. Currently, we need to specify manually one-by-one all AD groups that the firewall need to retrieve user membership. New groups get created daily.    If we could specify instead the firewall to retrieve user membership of all AD groups under a specific OU, it would avoid us to update the firewalls every time we create a new AD group. ... View more