View User to IP Address or User Groups Mappings
Table of Contents
Expand all | Collapse all
- Monitor Your Remote Networks
- Monitor Your Service Connections
- Manage ZTNA Connector
- Manage Prisma Access Locations
- Manage Tunnel Health
- Monitor Network Services
- Manage Notification Profiles
- Prisma Access Insights APIs
- Choose a Preferred Window for Certain Prisma Access Upgrades
View User to IP Address or User Groups Mappings
Prisma Access Insightsallows users to view user to IP address or user to groups mapping in real time for Mobile Users, Remote Networks, and Service Connections.
Prisma Access Insightslets you view the user to IP address or user to groups mapping for Mobile Users in real time. For Remote Networks and Service Connections, you can view the user to user groups mappings.
The inverted triangles on the map are color-coded to indicate
Prisma Accesslocation status:
- Green: All instances are up.
- Red: All instances are down.
- Yellow: Instances are a combination of up, down, and unknown, and may require your attention.
- Gray: All instances are unknown.
- From theSummarydashboard, select theMap View.
- Hover your mouse cursor over a location until a popup dialog appears.
- SelectView User ID, User Groups & IP Mappingfrom the dialog. TheUserID and User Group Distribution Checkdialog opens.
- Select theandPrisma AccessLocationNode Type. Theis not taken into consideration when thePrisma AccessLocation filterNode TypeisMobile Users (GlobalProtect).For Remote Networks and Service Connections, you can only see user ID to user group mappings.
Node Type:Mobile Users (GlobalProtect)You can see user ID to IP mapping as well as the user ID to user group mapping. Thefilter is not taken into consideration when the selectedPrisma AccessLocationNode TypeisMobile Users (GlobalProtect). Instead,Prisma Access Insightsuses the GlobalProtect gateway IP address to look for the data.
- Select a. If thePrisma AccessLocationPrisma AccessLocation you select does not have any associated remote networks or service connections, you see a “No Data Available” message in theRemote Networks Sitefield orService Connections Sitefield, as the case may be, and theShow User GroupsandExport to CSVbuttons are disabled.
- FromNode Type, select Remote Networks or Service Connections.
- From theRemote Networks SiteorService Connections Sitefield, select the site from which you want to retrieve the data.
- In View, select whether you want to see which user groups a User ID belongs to (User) or which users are a part of a particular Group (Group) associated with the site.
- If you selectUser, enter the user’sUser ID(for example, saas\testuser3) to get the user ID to user group mapping, then selectShow User Groups. A list of all the groups that the user ID belongs to is displayed underUser ID-IP Mappings.You can search for a specific group by typing the group name or a string that is contained within the group name you want to find by entering it in theUser Grouptext box. If you search for a group that does not exist, you see an error saying, “No data is available.” You can also sort the list of groups by toggling the arrows icon next toUser Group. You can select the number of entries you want to display, as well as scroll through pages by clicking the forward and back arrows.If you selectGroups, selectingShow User-Group Mappingsdisplays all the groups that are available in the site underAll User Groups in. If you select a group, all users belonging to the group are displayed in the right pane. The<selected_site>Export to CSVbutton becomes activated, and you can export all the users belonging to that group into a CSV file. The exported CSV file contains all the entries for the group, even if they are not displayed in the UI at the time of export.You can search for a specific group by typing the group name or a string that is contained within the group name you want to find by entering it in theUser Grouptext box. If you search for a group that does not exist, you see an error saying, “No data is available.” You can also sort the list of groups by toggling the arrows icon next toUser Group. You can select the number of entries you want to display, as well as scroll through pages by selecting the forward and back arrows.
- Enter a GlobalProtect IP gateway address in theGatewaytext box.
- Select whether you want toViewdata for user ID to user IP mapping (Users) or user ID to user group mappings (Groups) for users who are connected to your specified GlobalProtect gateway.If you selectedUsers, selectShow UserID-IP Mappings. A table of user ID to their user IP mapping is displayed along with theTimeout, which shows you for how long (in seconds) the user ID to user IP entry is valid. Selecting a particular user displays the groups that the user belongs to. Selecting a group shows every user that belongs to that group. It also enables theExport to CSVbutton, which allows you to export all the users in that group regardless of any filtered view displayed in the UI.If you selectedGroups, chooseShow User-Group Mappings. A list of all user groups belonging to that GlobalProtect gateway appears underUser Group. Selecting a user group displays all users belonging to that group in the right pane. It also enables theExport to CSVbutton, which allows you to export all the users in that group regardless of any filtered view displayed in the UI.