Hello, I'm trying to configure SSL-VPN with Active Directory authentication.I'm running PANOS 4.0.4, and SSL-Client 1.3.0 and 1.3.1. I've configured the following: 1. An Server Profile with type Active Directoy 2. An Authentication Profile with LDAP authentication, and using the profile I've created at step 1. Also add a group and some users to the Allow List. 3. At User Identification I have enabled the LDAP server, sing the profile I've created at step 1. PaloAlto can connect the LDAP server. I can see the groups and users. The CLI command show user ldap-server server all shows that this connection is as supposed to be ... I have also created the tunnel SSL-VPN, and it is working OK if I use local users. When I change this configuration to use the profile with Active Directory users, I can not connect any of the users that are on the Allow List. Allways have the same error: Authentication failed: Invalid username or password. I use DOMAIN\USER as user at the name field of NetConnect. Can anyone help me with this problem? Best regards, Nuno Carrilho
... View more