topic Active Directory Objects in Firewall and Security Management

Active Directory Objects

Anthony_Kahwati — Mon, 10 Mar 2025 16:41:05 GMT

Could I create an object in policy that understands if a host (say a VM) is part of a particular AD group?

For example, if I wanted a policy that says Allow "UserVMs" to "[IntranetSites]" on "https".

Is it possible to have UserVMs as an object that is populated from a connection to AD?

Hope it's explained well enough... essentially trying to make policy a little more dynamic by using AD data.

Thanks

Re: Active Directory Objects

CaseyB — Mon, 10 Mar 2025 19:58:13 GMT

Yes, look at Access Roles & Identity Awareness.

R81.20 Identity Awareness Administration Guide

Re: Active Directory Objects

Wolfgang — Mon, 10 Mar 2025 19:58:39 GMT

@Anthony_Kahwati yes, that‘s possible.

You can get a Connection to AD via AccountUnit. And with Access-roles you can use AD objects like users, groups, machines in your rules. Additional you can connect via the datacenter object to your vitualization platform (VMware, AWS, Azure etc.) and use the objects from these platforms.