IA - Enabling NTLMv2

Juan_ — Wed, 13 Jul 2022 14:21:51 GMT

Hi there,

According to sk91462 and Admin guides, the procedure to enable NTLMv2 is:

"Enable NTLMv2 negotiations for AD Query by using the adlogconfig command line interface: *Note in Cloud Mgmt environments this will need to be ran internally on the Mgmt server CLI.

Enable Identity Awareness without using the Wizard and install policy.
When configuring AD Query, type: adlogconfig a.
When configuring Identity Logging (Identity Awareness for Log Server) type: adlogconfig l.
Choose the Use NTLMv2 option.
Save and exit.
Install policy on the Security Gateway."

Now, we have tried it and the gateway appears to still be using NTLMv1, checked on packet capture.

With the DCs already using ONLY ntlmv2, we are getting bad credentials as described in the SK.

We've seen that in the gateway if you run 'adlogconfig a', Use NTLMv2 is not checked.

Should we check it on gateways as well even though is not mentioned on SKs and admin guide?

Has anyone tried this before?

Tag from previous discussion:

@Royi_Priov @checkandmate

Thanks
Juan

Re: IA - Enabling NTLMv2

Juan_ — Thu, 14 Jul 2022 07:23:26 GMT

Enabling NTLMv2 with 'adlogconfig a' on gateways restored communication with the DCs.

topic Re: IA - Enabling NTLMv2 in Firewall and Security Management

IA - Enabling NTLMv2

Re: IA - Enabling NTLMv2