Parks seasonal contractors live in a separate Active Directory fore…

Question

Parks seasonal contractors live in a separate Active Directory forest, and Identity Firewall rules must use those contractor groups. What should the administrator configure?

Accepted Answer

Register the contractor forest as an additional LDAP directory on NSX Manager so IDFW can resolve those groups — IDFW only knows groups from directories NSX Manager can read. A second forest means a second LDAP registration—not a Carbon Black list and not a pile of contractor IPs.

Answer

Add the contractors to a Carbon Black watchlist and use that watchlist as the DFW source

Answer

Collapse both forests into one Workspace ONE Access policy and skip NSX directory config

Answer

Create a static IP set of contractor laptops instead of a second directory

Parks seasonal contractors live in a separate Active Directory forest, and Identity Firewall rules must use those contractor groups. What should the administrator configure?

Short Explanation

Full Explanation