Is it possible to use AD group as criteria for computers?

[User58765958]

I can't figure out how to create a rule in MWG that affects computers belonging to a certain AD group. I have tried with Rule criteria "Authentication.UserGroups" but that one obviously only checks for users, not computers.

[aloksard]

Hi,

Hope you are doing well.

To filter based on system hostnames you can create a rule with criteria DNS.lookup.Reverse(IP) and in the parameters section -> Select parameter property as Client.IP

Configure reverse lookups up for system hostname, this completely depends on the DNS server, configured DNS server be able to get the A/host record of the system.

It is the DNS server configured on MWG which should be able to do reverse DNS lookup.

To filter based on the AD groups to which user belongs you can create a rule using property Authentication.UserGroups.

Was my reply helpful?
If you find this post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

Regards

Alok Sarda

[User58765958]

Hi Alok,

Thank you for your reply. But it wasn't exactly what I was hoping for.
I want to use an existing AD group where my computers already resides in. 

Regards

Peeter

[swilkens1]

Since only the user is authenticating with the MWG via NTLM, only user-specific information will be available.

As such, it is not possible for MWG to obtain or utilize Active Directory Computer groups, only User groups and attributes.

Best,

Steven

[fw_mon]

not tested yet:

first get a computername via reverse DNS lookup as @aloksard described, then perform a LDAP lookup to get a OU name where this computername resides

[User58765958]

OK,

Then I misunderstood @aloksard 's solution. I will try to reproduce this solution to our MWG.

Thanks