topic Re: AD Server Showing "Connection Timed Out" So Captive Portal Redirection not working in General Topics

AD Server Showing "Connection Timed Out" So Captive Portal Redirection not working

SahulH — Thu, 04 Jul 2019 07:02:55 GMT

Hi Team,

I am having an query regarding the Captive Portal issue. Herewith, I have network flow diagram to understand better on the scenario.

Network Schema:

**** Both end Firewall are of same device Palo Alto only.

=> From Head Office Firewall, we are able to reach the AD Server residing on Data Center Firewall without any issues. However while I am checking the status on Server Status it is showing as " Connection Timed Out".

=> Credentials that we have given to authenticate the server is under the administrator role for the AD Server.

=> Due to this User-IP-Mapping is not happening on the Head Office Firewall. So we need to sort of the Connection Timed Out problem of that AD Server.

So please share us your inputs for the same on how to resolve this issue and i am eagerly waiting for an update on this regards. Thanks in advance !!

Best Regards,

Sahul Hameed

Re: AD Server Showing "Connection Timed Out" So Captive Portal Redirection not working

BPry — Fri, 05 Jul 2019 02:52:17 GMT

@SahulH,

Was this working previously or is it a new setup? You'll want to ensure that you have granted the user permissions to Event Log Readers, Server Operators, and Distributed COM Users to actually be able function correctly.

Re: AD Server Showing "Connection Timed Out" So Captive Portal Redirection not working

SahulH — Fri, 05 Jul 2019 04:56:45 GMT

@BPry

Thanks for your response !!

This is not a new setup, it was previously worked as expected however suddenly it is not working for the past 3 days.

Yes, I have verified all the user level permission is added for the service user which is used under WMI Credentials.

Please let me know if you have any additional query in order to find a solution on this issue. Thanks in advance !!

Best Regards,

Sahul Hameed

Re: AD Server Showing "Connection Timed Out" So Captive Portal Redirection not working

BPry — Fri, 05 Jul 2019 14:22:48 GMT

@SahulH,

If that's the case I would reach out to TAC so that they can take an in-depth look at the useridd.log file and see if it gives any additional information as to why the connection isn't functional, such as a stat_tls_s return error or something of the sort. It could also be worth simply restarting the management server if you haven't already done so to cycle the associated processes.

Re: AD Server Showing "Connection Timed Out" So Captive Portal Redirection not working

SahulH — Fri, 05 Jul 2019 15:07:17 GMT

@BPry

Thanks for your suggestion, I will give it a try by restarting the Management server and see if that help us in this scenario.

Best Regards,

Sahil Hameed

Re: AD Server Showing "Connection Timed Out" So Captive Portal Redirection not working

OtakarKlier — Fri, 05 Jul 2019 17:11:46 GMT

Hello,

Also check the logs to see where you are getting dropped. By default the PAN will use the management interface to communicate with the agents.

Regards,

Re: AD Server Showing "Connection Timed Out" So Captive Portal Redirection not working

SahulH — Sat, 13 Jul 2019 07:37:52 GMT

@BPry

I have tried restarting the Management Server but unfortunately that doesn't help in this scenario.

@OtakarKlier

Sure, I will check on this as well and let you know with an update.