View User to IP Address or User Groups Mappings
Prisma Access Insights lets you view the user
to IP address or user to groups mapping for Mobile Users in real
time. For Remote Networks and Service Connections, you can view
the user to user groups mappings.
The inverted triangles
on the map are color-coded to indicate Prisma Access location status:
- Green: All instances are up.
- Red: All instances are down.
- Yellow: Instances are a combination of up, down, and unknown, and may require your attention.
- Gray: All instances are unknown.
- From theSummarydashboard, select theMap View.
- Hover your mouse cursor over a location until a popup dialog appears.
- SelectView User ID, User Groups & IP Mappingfrom the dialog. TheUserID and User Group Distribution Checkdialog opens.
- Select thePrisma Access LocationandNode Type. ThePrisma Access Location filteris not taken into consideration when theNode TypeisMobile Users (GlobalProtect).For Remote Networks and Service Connections, you can only see user ID to user group mappings.
- Select aPrisma Access Location. If the Prisma Access Location you select does not have any associated remote networks or service connections, you see a “No Data Available” message in theRemote Networks Sitefield orService Connections Sitefield, as the case may be, and theShow User GroupsandExport to CSVbuttons are disabled.
- FromNode Type, select Remote Networks or Service Connections.
- From theRemote Networks SiteorService Connections Sitefield, select the site from which you want to retrieve the data.
- In View, select whether you want to see which user groups a User ID belongs to (User) or which users are a part of a particular Group (Group) associated with the site.
- If you selectUser, enter the user’sUser ID(for example, saas\testuser3) to get the user ID to user group mapping, then selectShow User Groups. A list of all the groups that the user ID belongs to is displayed underUser ID-IP Mappings.You can search for a specific group by typing the group name or a string that is contained within the group name you want to find by entering it in theUser Grouptext box. If you search for a group that does not exist, you see an error saying, “No data is available.” You can also sort the list of groups by toggling the arrows icon next toUser Group. You can select the number of entries you want to display, as well as scroll through pages by clicking the forward and back arrows.If you selectGroups, selectingShow User-Group Mappingsdisplays all the groups that are available in the site underAll User Groups in. If you select a group, all users belonging to the group are displayed in the right pane. The<selected_site>Export to CSVbutton becomes activated, and you can export all the users belonging to that group into a CSV file. The exported CSV file contains all the entries for the group, even if they are not displayed in the UI at the time of export.You can search for a specific group by typing the group name or a string that is contained within the group name you want to find by entering it in theUser Grouptext box. If you search for a group that does not exist, you see an error saying, “No data is available.” You can also sort the list of groups by toggling the arrows icon next toUser Group. You can select the number of entries you want to display, as well as scroll through pages by selecting the forward and back arrows.
Node Type:Mobile Users (GlobalProtect)You can see user ID to IP mapping as well as the user ID to user group mapping. ThePrisma Access Locationfilter is not taken into consideration when the selectedNode TypeisMobile Users (GlobalProtect). Instead, Prisma Access Insights uses the GlobalProtect gateway IP address to look for the data.- Enter a GlobalProtect IP gateway address in theGatewaytext box.
- Select whether you want toViewdata for user ID to user IP mapping (Users) or user ID to user group mappings (Groups) for users who are connected to your specified GlobalProtect gateway.If you selectedUsers, selectShow UserID-IP Mappings. A table of user ID to their user IP mapping is displayed along with theTimeout, which shows you for how long (in seconds) the user ID to user IP entry is valid. Selecting a particular user displays the groups that the user belongs to. Selecting a group shows every user that belongs to that group. It also enables theExport to CSVbutton, which allows you to export all the users in that group regardless of any filtered view displayed in the UI.If you selectedGroups, chooseShow User-Group Mappings. A list of all user groups belonging to that GlobalProtect gateway appears underUser Group. Selecting a user group displays all users belonging to that group in the right pane. It also enables theExport to CSVbutton, which allows you to export all the users in that group regardless of any filtered view displayed in the UI.
Most Popular
Recommended For You
Recommended Videos
Recommended videos not found.