topic Re: Problem with creating LDAP Account Unit in Firewall and Security Management

Problem with creating LDAP Account Unit

fafeka22 — Fri, 05 Dec 2025 05:16:52 GMT

Hello everyone

I am having a problem with Check Point R81.20. I cannot create a new LDAP Account Unit or edit an existing one because I cannot get Branches.

I also tried to enter them manually, but when I try to add them, they simply do not appear in the field.

The current LDAP Account Unit was created automatically when I enabled and configured Identity Awareness.

Re: Problem with creating LDAP Account Unit

Vincent_Bacher — Fri, 05 Dec 2025 12:46:55 GMT

I have already created several au's and there have been cases where “Fetch branches” has not worked for various reasons. However, since you cannot enter a branch via “Add,” I would recommend creating an SR in UC at this point.

There is either something wrong with the SmartConsole, the API, or whatever.

The only thing I would do before the SR (if you haven't already) is install the latest R81.20 SmartConsole. If it's up to date, as I said —> SR

Re: Problem with creating LDAP Account Unit

Chris_Atkinson — Fri, 05 Dec 2025 13:31:10 GMT

If the issue you're having matches sk184190 or similar please reach out to TAC for a new SmartConsole build.

Re: Problem with creating LDAP Account Unit

the_rock — Fri, 05 Dec 2025 14:19:35 GMT

Just to confirm, is this S1C management? If so, its expected that it would not work. If its onprem mgmt, then I would verify basic connectivity and follow sk Chris referenced.

Re: Problem with creating LDAP Account Unit

Vincent_Bacher — Fri, 05 Dec 2025 14:24:54 GMT

Would manually entering a branch also not work with S1C management? I'm asking because I've never worked with it before. Apart from Harmony Endpoint Management.

Re: Problem with creating LDAP Account Unit

the_rock — Fri, 05 Dec 2025 14:30:52 GMT

Yep, thats works 100%, just fetch does not.

Re: Problem with creating LDAP Account Unit

Lesley — Sat, 06 Dec 2025 08:25:19 GMT

Check for blocked ports from the system you run smart console on. Check for ldap or ldaps traffic. Firewall could block traffic or firewall on dc server itself.

If 636 does not work, try 389 and other way around. 636 is recommended because of encryption. Try to fetch fingerprint then you know connections works. Consider to leave the fingerprint empty if you are done to avoid down time if certificates are automatically renewed on dc at a random moment. Also consider using identity collectors to avoid unnecessary load on the gateway

Re: Problem with creating LDAP Account Unit

the_rock — Sat, 06 Dec 2025 18:07:44 GMT

Sometimes, can happen port 636 does not work, definitely worth checking.

Re: Problem with creating LDAP Account Unit

Chris_Atkinson — Sat, 06 Dec 2025 23:00:25 GMT

Most likely it is this: sk184190: "Fetch branches" button does not show "Branches in use"

There is a fixed version of smartconsole available via TAC.

Re: Problem with creating LDAP Account Unit

fafeka22 — Mon, 08 Dec 2025 04:51:36 GMT

Yes its match the followed sk, but i already have the latest build of smart console installed, i will try to re-install SmartConsole and open ticket in TAC

Re: Problem with creating LDAP Account Unit

fafeka22 — Mon, 08 Dec 2025 04:53:29 GMT

The connectivity is ok because i checked it via ldapsearch from GW,SMS and SmartConsole, i also tried port 636 abd 389, the results same

Re: Problem with creating LDAP Account Unit

Vincent_Bacher — Mon, 08 Dec 2025 05:37:38 GMT

All of this would explain why fetching does not work. However, it does not quite fit with the symptom that even manual entry does not work – would expect an error message when there would be a connection attempt when entering the branch – which makes the whole thing somewhat mysterious to me.

Re: Problem with creating LDAP Account Unit

fafeka22 — Mon, 08 Dec 2025 05:41:40 GMT

I opened SR to TAC because re-install SmartConsole dont helm me, i also cant finf my problem in list of all resolved issues on SmartConsole Download page https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.20_SC/R81.20/R81.20-List-of-all-Resolved-Issues.htm?tocpath=_____4

I think there is a problem in R81.20 release because on R82 it work fine

Re: Problem with creating LDAP Account Unit

Chris_Atkinson — Mon, 08 Dec 2025 06:39:42 GMT

As per the SK referenced earlier TAC will provide a new build of Smartconsole with the fix, this build isn't yet available publicly.

Re: Problem with creating LDAP Account Unit

TJ_Aus — Mon, 08 Dec 2025 08:06:15 GMT

It was happening to us too last week, I raised a case and TAC gave us the files that Chris Atkinson is referring to above.
I uninstalled Smart Console and installed the new one provided and it all works now

sk184190 - "Fetch branches" button does not show "Branches in use"

Re: Problem with creating LDAP Account Unit

fafeka22 — Mon, 08 Dec 2025 08:34:03 GMT

Thank you, the TAC provided me SmartConsole Build and i installed it, everything work now. But why this build dont published and only provided via TAC?

Re: Problem with creating LDAP Account Unit

Chris_Atkinson — Mon, 08 Dec 2025 08:44:13 GMT

Imagine it's simply a matter of timing and only temporary until the next planned release.

Re: Problem with creating LDAP Account Unit

the_rock — Mon, 08 Dec 2025 11:53:33 GMT

Glad that worked!