Hi Valentine, Thank you so much for your answer, that's exactly what I need. I need my firewall to be able to pull in groups of users. I was with the idea that user-ID agent would give me the capability to define groups of users to my Security Policies, but I see that additionally I need to configure LDAP. I found the below documentation, could you let me know if that should be enough? https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/authentication/configure-ldap-authentication Thank you!
... View more
Hey guys! We got a couple of 7050s in our Data Center with URL Filtering license, and we are planning to implement the URL Filtering feature. I understand first thing is to create the URL profile with the allowed / denied categories and attach it to the Security Policies that allow outbound Internet access. But my concern is how to enable the use of specific users or groups to those security policies? I have enabled User-ID agent in my environment, the User-ID agent is retrieving the user to IP address mappings from the Domain Controllers, and my Firewall is already talking to the User-ID agent! However, could anyone let me know if I still need to add some LDAP configuration to my Firewall? Or if I'm ready to implement Web Filtering to specific users. Kind Regards!
... View more