Parent Device Groups in Panorama retrieval times for user and group information
70
Created On 07/24/25 10:14 AM - Last Modified 09/02/26 22:23 PM
Question
While creating a security policy, why is taking longer time to retrieve user and group information on Parent Device Groups when it is selected to add an user or group?
Environment
- Panorama
- User ID Master Device
- User ID Group Mapping / CIE
Answer
- A parent Device Group fetches the users and groups of all nested device groups according to each User ID Master Device
- In the following Device Group Hierarchy example:
- Adding users to a Security Policy in the 'Shared' Device Group
- it fetches the users and groups information according to the User ID Master Device configured in the nested Device Groups. In this case 5 Device Groups: LDAP group mappings of vpfw22, vpfw11/vsys1, vpfw11/vsys2, vpfw11/vsys; and the CIE-OktaDev