We recommend using
a Group Include List in
the LDAP server profile, so that you can specify which groups you
want to retrieve, instead of retrieving all group information.
Allow Panorama
to use group mappings in security policies by configuring one or more
next-generation on-premises or VM-series firewalls as a Master Device.