topic Re: Identity awareness is not over Ipsec tunnel in General Topics

Identity awareness is not over Ipsec tunnel

007_mjn — Fri, 01 Dec 2023 10:55:08 GMT

Hi Team,

I can't connect my gateway to identity awareness over vpn tunnel.

connectivity between both firewall.

Ad server<--DC_GATEWAY<-->siteTOsite<--> Remote_gateway

I'm getting error. you can check in snapshot I attached in this post.

I have changed ENALBLE_LDAP_SERVER on implied_rules.def file and still its not working.

Re: Identity awareness is not over Ipsec tunnel

PhoneBoy — Fri, 01 Dec 2023 14:26:00 GMT

What exact steps were taken to verify the traffic was not traversing the VPN?
This error is expected if your LDAP server requires ldaps or is set to use NTLMv2 (default in recent Windows Server releases): https://support.checkpoint.com/results/sk/sk91462