About alvaroarcaz

Hi Thanks for the answer. This worked as expected for Windows users but problems came for MAC users or Iphone Users. In my company the IOS devices are not part of the active directory domain and for instance there is no way where a USERID agent can find domain events on the active directory. For me the solution came to avoid this domain mapping on firewall level, i have had a case with the vendor for more than a month and am still waiting to find the way.... ... View more

Hi I receive the user logs from the Pulse Secure VPN appliance to the USER ID agent located on windows server With the regex i was able to just get the user id from the user connected. My surprise was that I was not unable to map the user id with the domain group on security policy, this is really a bad situation for us. Is it possible to just avoid the domain name on the palo alto when trying to search on ldap group? I can not understand why yes or yes paloalto build this: >From LDAP group PaloAlto get: domainname\userid With the UserID agent after the regex i get a mapping with IP+userid, and on the firewall logs i can see this way: source ip: ip from user source user: userid The security policy will never match!! as there is a difference between domainname\userid => LDAP PaloAlto userid => Information from my agent Hours and hours spent here and no answer anywhere im totally frustrated ... ... View more

Hi   Please could you detail this a bit? I had a similar situation and not follow what is your solution even on the original post!   Thanks! ... View more

Hi   Let me know if there is a way to remove the domain name from the group mapping   In my case: show user group name emea.com\test short name: emea.com\test source type: ldap source: test [1 ] emea.com\test1 [2 ] emea.com\test2 [3 ] emea.com\test3   i only need from the group mapping the name "test1 or "test2" or "test3"   The reason why is because i get from external source on palo alto the user id test1 or "test2" or "test3" The goal is create a policy rule base on the source user that is being part of a domain group   i expend hours and there is no way to understand or found the reason why palo alto get from ldap group mapping "domain name + name"    ... View more

Today at 08/03/2022 still waiting a solution from PaloAlto, i just escalate to the TAM and they submit a Feature Request, this make no sense, how long should i wait? ... View more

Still waiting for solution .... ... View more

Hi   Now is (9 years later) and Palo Alto not provide a solution for this SNMP feature make totally not sense ... View more