Solved: Objects based on AD domain info

Waldo

We have just created an AD trust with a partner company. Their AD domain is called "trusted.local". We use our local AD domain "trusting.local" on our CP gateways for identity awareness functionality.

I am looking for a way to identify end users in the "trusted.local" AD domain based on the UPN suffix "trusted.local". Something akin to "*@trusted.local" - I then want to be able to put them in an object that can be used in gateway policy as a source or destination..

Any ideas? Thanks

PhoneBoy

In order to see identities from another AD server; you’d have to configure Identity Collector to poll that AD server.
This is because to associate a user with an IP, we need to see the Security Logs from AD showing the user login.
Also, there would need to be an LDAP Account Unit defined for the relevant LDAP Branch.
Whether the partner will give you the necessary access to do that is a separate question.

View solution in original post

PhoneBoy

In order to see identities from another AD server; you’d have to configure Identity Collector to poll that AD server.
This is because to associate a user with an IP, we need to see the Security Logs from AD showing the user login.
Also, there would need to be an LDAP Account Unit defined for the relevant LDAP Branch.
Whether the partner will give you the necessary access to do that is a separate question.

the_rock

Phoneboy explained it perfectly.

Andy

Are you a member of CheckMates?

Objects based on AD domain info