topic Re: Checkpoint lost connection to AD LDAP in Firewall and Security Management

Checkpoint lost connection to AD LDAP

minhhaivietnam — Wed, 22 Jun 2022 13:42:51 GMT

Hi friends,

I am facing with issue that My checkpoint R81 is losing connection to AD LDAP.

After a reboot of AD server, My checkpoint is saying that it lost connection to LDAP.

This is log it saying:

we have updated new password for account ldap (which is used for Identify Awareness), But problem still exist.

Could someone help me to find rootcause. Thanks you in advance.!!

Re: Checkpoint lost connection to AD LDAP

Wolfgang — Wed, 22 Jun 2022 20:43:18 GMT

Maybe there are new updates or configuration on your domain controllers.

Have a look Check Point response to CVE-2021-26414 - "Windows DCOM Server Security Feature Bypass" and AD-query failed with Microsoft Windows Server 2022

Check your domain controller logs and better solution will be the identity collector not AD query.

Re: Checkpoint lost connection to AD LDAP

the_rock — Thu, 23 Jun 2022 01:09:24 GMT

I agree 100% with @Wolfgang . I had customer with exact same issue and it was solved by patching their AD server.

Re: Checkpoint lost connection to AD LDAP

minhhaivietnam — Thu, 23 Jun 2022 06:18:42 GMT

I check with AD sysadmin, he just upgrade this security patch KB5014702. Not sure if this causes AD query failure ?

Re: Checkpoint lost connection to AD LDAP

the_rock — Thu, 23 Jun 2022 08:41:53 GMT

It does.

Re: Checkpoint lost connection to AD LDAP

minhhaivietnam — Thu, 23 Jun 2022 08:56:17 GMT

Mr Rock, So could you tell me how to fix this issue?

Re: Checkpoint lost connection to AD LDAP

the_rock — Thu, 23 Jun 2022 10:18:46 GMT

Patch AD server with latest updates.

Re: Checkpoint lost connection to AD LDAP

MathiasB — Fri, 24 Jun 2022 09:20:30 GMT

I am experiencing the same issue right now after AD received the june patch KB5014702.

However my AD colleagues told me that this is the most recent update. Therefore I'm not quite sure what you mean by "Patch AD server with latest updates."

Re: Checkpoint lost connection to AD LDAP

Chris_Atkinson — Sat, 25 Jun 2022 07:11:27 GMT

What is the JHF level of your Gateway?

* Jumbo Hotfix Accumulator for R81.10 starting from Take 55

* Jumbo Hotfix Accumulator for R81 starting from Take 60

* Jumbo Hotfix Accumulator for R80.40 starting from Take 158

* Jumbo Hotfix Accumulator for R80.30 starting from Take 251

* Jumbo Hotfix Accumulator for R80.20 starting from Take 208