topic Re: connections firewall to ldap in Advanced Threat Prevention Discussions

connections firewall to ldap

ricardo.alarcon — Mon, 02 Sep 2019 16:13:26 GMT

Hello, i need your help. Iwould like to know how the ildap connection woks. Why are there connections between the PAN directly to the pc and does not go through the AD server?

Is this behavior normal?

The security departament says it´s not normal or they don´t understand

Thanks for your help

Re: connections firewall to ldap

fatboy1607 — Tue, 03 Sep 2019 10:19:26 GMT

It depends on which interface you are using to eastablish LDAP connection by deafult it uses mgmt.

it uses TCP 139 you need to create security policy to allow traffic

run below command to check status

show user group-mapping state all

below are some useful resource.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGnCAK

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGOCA0

Re: connections firewall to ldap

ricardo.alarcon — Tue, 03 Sep 2019 13:37:47 GMT

Thanks for the answer, but what I need to know is. why does PAN connect directly to the pc? it should connect to AD server and AD connect to pc. it is understood? excuse my english, it's not good

the logs show PAN connections with all the pc. it should be the connection of PAN with server AD and server AD with the pc

Re: connections firewall to ldap

fatboy1607 — Fri, 06 Sep 2019 05:41:40 GMT

OK please tell us why are you using LDAP ? for firewall admin authentication or global protect client authentication or anything else ?

Re: connections firewall to ldap

ricardo.alarcon — Fri, 06 Sep 2019 15:24:02 GMT

Thanks for your answer

Global Protect

Regards