how to add active imported user in local group

Question

hi, 
 i have XG integrted with AD. imported groups from AD. when user login then i start seeing users in XG. 
 My questions are: 
 Q1: can i add that AD user that i can see in XG in a group that i created local on firewall??? i created a local group added that user in that group but after sometime user is remvoed from that group. 
 Q2: after how long Firewall get synched with AD???

Antonio Cienfuegos S · Answer

Q1: No, you can't. In previous Cyberoam era, AD integration had 2 options: Strict and lose. First one is like what you have in Sophos, cant change group. The other one just "imported" the users on Cyberoam and then, you were able to change them as you wanted. 
 
 Q2: Not sure what you mean with this question.

LuCar Toni · Answer

See: https://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/sfos/learningContent/AuthenticationActiveDirectoryGroupBehavior.html 
 XG will always create/update a user after he is authenticated. So each and every request of the user will create or update this user. 
 The user is logging in in the morning and get his latest informationen from AD reflected on the firewall. 
 The groups can be imported to give XG a Variety to choose from. First match will reflect the primary group, all other groups will be in the backend and not shown to the admin. 
 XG will also use this process to cleanup. Likely your changes are only on the AD. You should not start to create different information (on AD and on XG).

how to add active imported user in local group

Top Replies