This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About SBI_INFRASTRUCTURE
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About SBI_INFRASTRUCTURE
01-05-2023
4Posts
0Likes
1Solution
Jan 05, 2023Last Visited
User
Activity
User
Profile
Latest posts by SBI_INFRASTRUCTURE
| Subject | Views | Posted |
|---|---|---|
| 583 | 09-23-2021 06:48 PM | |
| 9046 | 06-25-2020 09:41 PM | |
| 9471 | 06-25-2020 08:18 PM | |
| 10045 | 06-23-2020 08:43 PM |
User Badges
Community Statistics
| Member Since | 06-16-2020 04:26 AM |
| Date Last Visited | 01-05-2023 12:19 AM |
| Posts | 4 |
09-23-2021
06:48 PM
Hello @TomYoung, We're not yet using PANOS 10.X but we will take a look - thanks. We ended doing what @Tony_Ellis mentioned - AzureAD/SAML for Authentification & MFA and AD on-premise for groups mapping. AzureAD information been sync from our AD on-premise to ease the user onboarding process. Best,
... View more
06-25-2020
09:41 PM
Will do - thanks for you input.
... View more
06-25-2020
08:18 PM
@domari Hello, Yes you understood correctly. The thing is to be able to use LDAP or LDAP-S to connect to AzureAD you will need to use an intermediate called Azure AD Domain Services which requires a pay-to-use subscription. We want to reduce our cloud ans SaaS subscriptions footprint to a minimum and it would make us go the wrong way tho. It seems like, as of today, being able to pull out groups mapping directly from AzureAD is not possible.
... View more
06-23-2020
08:43 PM
Hello, We're currently implementing GlobalProtect with SAML Authentification to AzureAD only (no hybrid) based on groups for easier management. Example : Groupe1 is given an IP_Pool1 IP with access to subnet1 Groupe2 is given an IP_Pool2 IP with access to subnet 1 and 2 As of today, we didn't find any way to do it properly and from what we've seen online it may not be supported at all without any third party or on-prem AD. Did any of you ran into that issue before and did you find the solution? Thanks.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
01-05-2023
12:19 AM
|
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks