topic LDAP Server SSL Encryption in Firewall and Security Management

LDAP Server SSL Encryption

starmen2000 — Wed, 06 Sep 2023 13:13:18 GMT

Hi mates,

A customer wants gateway to communicate with LDAP via SSL (636) port. On Smartconsole on LDAP unit I can see Encryption tab on LDAP server properties. The question is whether the Fetch button has to be selected and the fingerprint has to be verified or is it not a must?

One more thing, what configuration need to be done on LDAP server side?

Re: LDAP Server SSL Encryption

K_R_V — Wed, 06 Sep 2023 13:36:02 GMT

Hey, I think this is already described in this article : https://community.checkpoint.com/t5/Management/LDAPS-Fingerprints-and-Proxy/td-p/155174

You can leave it empty, it will work as a ANY rule.

My own opinion, leave it open, I've seen too many issues with the fingerprints and outages because of a changed certificate ... .

Re: LDAP Server SSL Encryption

starmen2000 — Wed, 06 Sep 2023 15:53:15 GMT

Hi, thank you for your answer. On Active Diretory Site is there anything to be done?

Re: LDAP Server SSL Encryption

the_rock — Wed, 06 Sep 2023 19:01:00 GMT

I dont believe you need to do anything on AD side.