Paloalto | Configuring User-ID

Berikut Topologinya

Create OU dan create user namanya pa lalu , properties user pa tersebut, lalu Memeber Of nya disesuaiakn dengan screnshot dibwawh ini.

1. Enable User-ID by Zone

3. User-ID Identification-Agent

then..

4. Seting Service Router Configuration Device | Setup | Services Klick (Service Route Configuration) , pilih Custom, lalu aktifkan /centang:

DNS        : interface ether1/2 (Inside)
Keberos    : interface ether1/2 (Inside)
LDAP    : interface ether1/2 (Inside)
UID-Agent : interface ether1/2 (Inside)

THEN...Verifikasi dibagian User Identification , check sampai status Connected

5. Seting Server LDAP Profile. Klick Device | Server Profile | LDAP

6. Seting LDAP Group Maping (Server Profile)

6. Seting LDAP Group Maping (Server Profile)Group Include List)

7. Authentication Profile, Add user dari AD ke Palo. Device | Authentication Profile | Authentication | Add.

Then....Tab Advanced . tambahkan user dari group AD, lalu commit.

Selesai Untuk LDAP

Tahap_II
1. Kita mau buat security-Policy. Tp sebelum masuk kesana kita cb buat URL_category dulu. Ada 2 category, white-list dan black-list.

then..ada 2 category.

2. ...then... lanjut ke menu URL-Filtering

3. Buat Group_Security_Profile

4. Buat Security-Policy. User dari group AD, yaitu grup HR.

then

--Supya muncul menu Overide (dgn masukin password) ketika akses web linkedin.co maka perlu seting ngan berikut.Device | Services | Contenct-ID | URL Admin Override