https://community.checkpoint.com/t5/Firewall-and-Security-Management/Integration-Checkpoint-with-AD/m-p/180112#M32950 <P>What version/JHF?<BR />Did you follow all the steps here? <A href="https://support.checkpoint.com/results/sk/sk89841" target="_blank">https://support.checkpoint.com/results/sk/sk89841</A><BR /><BR /></P> Fri, 05 May 2023 23:14:00 GMT PhoneBoy 2023-05-05T23:14:00Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Integration-Checkpoint-with-AD/m-p/179677#M32949 <P>I have been assigned to integrate our checkpoint firewall with our active directory. Both our AD and DNS are hosted on different servers. We need AD users to authenticate for Remote VPN access with Checkpoint Endpoint Security Client. and that was succesful. I am able to connect to the client.<BR /><BR />What I need to achieve is I need AD Users to change their own password up on login on&nbsp;Checkpoint Endpoint Security Client. I have seen different workarounds but when i try to configure Use encryption (SSL) and try to fetch the servers fingerprint "Failed to connect to LDAP Server SSL connection failed ckpSSL ssl lib error." this error is displayed. I have checked my AD Servers security policy and checked "Domain controller: LDAP server signing requirements" and it is set to None.&nbsp;<BR /><BR />How can I solve this error?</P> Tue, 02 May 2023 13:19:45 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Integration-Checkpoint-with-AD/m-p/179677#M32949 gemechisd 2023-05-02T13:19:45Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Integration-Checkpoint-with-AD/m-p/180112#M32950 <P>What version/JHF?<BR />Did you follow all the steps here? <A href="https://support.checkpoint.com/results/sk/sk89841" target="_blank">https://support.checkpoint.com/results/sk/sk89841</A><BR /><BR /></P> Fri, 05 May 2023 23:14:00 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Integration-Checkpoint-with-AD/m-p/180112#M32950 PhoneBoy 2023-05-05T23:14:00Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Integration-Checkpoint-with-AD/m-p/180121#M32953 <P>SK phoneboy gave looks promising for your issue.</P> Sat, 06 May 2023 02:30:43 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Integration-Checkpoint-with-AD/m-p/180121#M32953 the_rock 2023-05-06T02:30:43Z