Parent Device Groups in Panorama retrieval times for user and group information

Parent Device Groups in Panorama retrieval times for user and group information

70
Created On 07/24/25 10:14 AM - Last Modified 09/02/26 22:23 PM


Question


While creating a security policy, why is taking longer time to retrieve user and group information on Parent Device Groups when it is selected to add an user or group?



Environment


  • Panorama
  • User ID Master Device
  • User ID Group Mapping / CIE


Answer


  • A parent Device Group fetches the users and groups of all nested device groups according to each User ID Master Device
  • In the following Device Group Hierarchy example:

  • Adding users to a Security Policy in the 'Shared' Device Group

  • it fetches the users and groups information according to the User ID Master Device configured in the nested Device Groups. In this case 5 Device Groups: LDAP group mappings of vpfw22, vpfw11/vsys1, vpfw11/vsys2, vpfw11/vsys; and the CIE-OktaDev


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA1Ki000000fxvwKAA&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail