How to configure Cloud Identity Engine on the Panorama to pull the users/groups for use in security Policies?

• Cloud Identity Engine (CIE)
• Panorama
• Supported PAN-OS

1. Configure Cloud Identity Engine under GUI: Panorama > User Identification > Cloud Identity Engine as a mapping source on the Panorama.

2. Add Cloud Identity Engine (CIE) configured in step 1 under GUI: Panorama > Device Groups > click on device group > select Cloud Identity Engine

3. Click OK and commit the change on the Panorama.
4. Now users/groups are available to be used under GUI: Device Groups > security policy > source users configuration.

Please Note that this config will only for pulling the group from the cie on panorama, we can not use both ldap and cie since this is base on device group and thats one or the other.