connections firewall to ldap

[ricardo.alarcon]

Hello, i need your help. Iwould like to know how the ildap connection woks. Why are there connections between the PAN directly to the pc and does not go through the AD server?

Is this behavior normal?

The security departament says it´s not normal or they don´t understand

Thanks for your help

[fatboy1607]

It depends on which interface you are using to eastablish LDAP connection by deafult it uses mgmt.

 it uses TCP 139 you need to create security policy to allow traffic

run below command to check status

show user group-mapping state all

below are some useful resource.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGnCAK

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGOCA0

[ricardo.alarcon]

Thanks for the answer, but what I need to know is. why does PAN connect directly to the pc? it should connect to AD server and AD connect to pc. it is understood? excuse my english, it's not good

the logs show PAN connections with all the pc. it should be the connection of PAN with server AD and server AD with the pc

[fatboy1607]

OK please tell us why are you using LDAP ?  for firewall admin authentication or global protect client authentication or anything else ?

[ricardo.alarcon]

Thanks for your answer

Global Protect

Regards