I am trying to integrate PA firewall with newly installed Active Directory server (windows server 2019) but it is not connecting. I get the error Failed to connect to 10.x.x.x(10.x.x.x):389 and the server monitoring status says host unreachable. The group mapping, group include list does not populate as the firewall has not made connection yet. Multiple hosts can ping the server successfully, so it is reachable. I have reinstalled and reconfigured the AD server and also tried with a new server 2016 but get the same error. I have used this configuration before with server 2019 and it connected without any issues. However, this time I do have IPSec and Globalprotect tunnels running and a few other security policies and all of that is working fine. I have checked everything but can’t find what could be wrong. Is a security policy/rule required for the user-id agent? The user ID I created is a member of Event Log Readers, Distributed COM Users and Server Operators. There is already traffic to and from the AD server before trying to setup AD. Any help is appreciated.
... View more