topic Identity Awareness fetch over IP-sec vpn || Azure in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/Identity-Awareness-fetch-over-IP-sec-vpn-Azure/m-p/234180#M45362 <P>we have a AD server behind Azure it was connection throughout Ipsec VPN.</P><P><U>adlog a dc</U> command shownig it was in connection but when i try to ftch a users in user group it was showing "error retriving users"&nbsp;</P><P>Then i was followed thi article <A href="https://support.checkpoint.com/results/sk/sk176849" target="_blank">https://support.checkpoint.com/results/sk/sk176849</A>&nbsp;and changed the password still the issue was same .</P><P>Next ran the AD test below error.</P><P>:status (BAD_USER_OR_PASS)<BR />:err_msg ("ADLOG_ERROR_BAD_CREDS;LDAP_PROTOCOL_ERROR")<BR />:ldap_status (LDAP_PROTOCOL_ERROR)<BR />:wmi_status (ADLOG_ERROR_BAD_CREDS)<BR />:timestamp ("Thu Nov 28 13:00:02 2024")</P><P>&nbsp;</P><P>Followed this article also&nbsp;&nbsp;<A href="https://support.checkpoint.com/results/sk/sk139652" target="_blank">https://support.checkpoint.com/results/sk/sk139652</A></P><P>Evrything was done from my end .</P><P>&nbsp;</P><P>&nbsp;</P> Fri, 29 Nov 2024 12:38:25 GMT prakash7 2024-11-29T12:38:25Z Identity Awareness fetch over IP-sec vpn || Azure https://community.checkpoint.com/t5/Firewall-and-Security-Management/Identity-Awareness-fetch-over-IP-sec-vpn-Azure/m-p/234180#M45362 <P>we have a AD server behind Azure it was connection throughout Ipsec VPN.</P><P><U>adlog a dc</U> command shownig it was in connection but when i try to ftch a users in user group it was showing "error retriving users"&nbsp;</P><P>Then i was followed thi article <A href="https://support.checkpoint.com/results/sk/sk176849" target="_blank">https://support.checkpoint.com/results/sk/sk176849</A>&nbsp;and changed the password still the issue was same .</P><P>Next ran the AD test below error.</P><P>:status (BAD_USER_OR_PASS)<BR />:err_msg ("ADLOG_ERROR_BAD_CREDS;LDAP_PROTOCOL_ERROR")<BR />:ldap_status (LDAP_PROTOCOL_ERROR)<BR />:wmi_status (ADLOG_ERROR_BAD_CREDS)<BR />:timestamp ("Thu Nov 28 13:00:02 2024")</P><P>&nbsp;</P><P>Followed this article also&nbsp;&nbsp;<A href="https://support.checkpoint.com/results/sk/sk139652" target="_blank">https://support.checkpoint.com/results/sk/sk139652</A></P><P>Evrything was done from my end .</P><P>&nbsp;</P><P>&nbsp;</P> Fri, 29 Nov 2024 12:38:25 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Identity-Awareness-fetch-over-IP-sec-vpn-Azure/m-p/234180#M45362 prakash7 2024-11-29T12:38:25Z Re: Identity Awareness fetch over IP-sec vpn || Azure https://community.checkpoint.com/t5/Firewall-and-Security-Management/Identity-Awareness-fetch-over-IP-sec-vpn-Azure/m-p/234188#M45363 <P>Please review&nbsp;<SPAN>sk60301 and consider a change to Identity Collector.</SPAN></P> Fri, 29 Nov 2024 12:54:07 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Identity-Awareness-fetch-over-IP-sec-vpn-Azure/m-p/234188#M45363 Chris_Atkinson 2024-11-29T12:54:07Z Re: Identity Awareness fetch over IP-sec vpn || Azure https://community.checkpoint.com/t5/Firewall-and-Security-Management/Identity-Awareness-fetch-over-IP-sec-vpn-Azure/m-p/234189#M45364 <P>I agree with Chris. IC is the way to go here.</P> Fri, 29 Nov 2024 13:45:22 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Identity-Awareness-fetch-over-IP-sec-vpn-Azure/m-p/234189#M45364 the_rock 2024-11-29T13:45:22Z