topic Re: Active Directory Cannot fetch groups Locally Managed Gateway in Spark Firewall (SMB)

Active Directory Cannot fetch groups Locally Managed Gateway

Oryx — Fri, 14 Nov 2025 15:07:39 GMT

Hi,

I'm running 82.00 in a Quantum Spark 2560 and I'm not being able to fetch the Groups of the Active Directory Auth Server.

I already confirmed that the user credentials are correct, since it's the same user that is configured on the Identity Collector.

The error is pretty generic if I don't specify the Branch. It just says "An error occurred while reading groups from Active Directory". I've already followed some SK, but I was not able to solve the issue.

Any recommendation on this?

Kind regards

Re: Active Directory Cannot fetch groups Locally Managed Gateway

Oryx — Fri, 14 Nov 2025 15:08:54 GMT

Re: Active Directory Cannot fetch groups Locally Managed Gateway

Vincent_Bacher — Fri, 14 Nov 2025 15:47:27 GMT

Is it about creating a LDAP account unit and section "object management"?
I always add a branch. Not sure what the issue is.
Would be good for the mates to have mor details.

Re: Active Directory Cannot fetch groups Locally Managed Gateway

the_rock — Fri, 14 Nov 2025 15:50:31 GMT

Any other relevant logs/errors or thats the only one?

Re: Active Directory Cannot fetch groups Locally Managed Gateway

Oryx — Fri, 14 Nov 2025 16:23:45 GMT

No. Just this.

Re: Active Directory Cannot fetch groups Locally Managed Gateway

Oryx — Fri, 14 Nov 2025 17:30:17 GMT

Hi,

This is a locally managed Firewall.

I would like to have more details, but the error is just this one.

Kind Regards.

Re: Active Directory Cannot fetch groups Locally Managed Gateway

Vincent_Bacher — Fri, 14 Nov 2025 17:49:52 GMT

Please specify exactly what you configured and where. The more details, the better. Screenshots always help as well. The information you shared is far too limited to assist.

Re: Active Directory Cannot fetch groups Locally Managed Gateway

Dafna — Sat, 15 Nov 2025 13:57:00 GMT

Hi,

What is the version of the AD server?

Re: Active Directory Cannot fetch groups Locally Managed Gateway

Oryx — Sat, 15 Nov 2025 14:10:23 GMT

Hi,

It's a Win Server2012.

Re: Active Directory Cannot fetch groups Locally Managed Gateway

Oryx — Sat, 15 Nov 2025 14:21:18 GMT

I understand your point. I would like to give you a lot of detail, but I've literally just configured the Active Directory and then when I do the OK, the error appears. I'm sharing the screenshot of the config.

Re: Active Directory Cannot fetch groups Locally Managed Gateway

the_rock — Sat, 15 Nov 2025 14:22:29 GMT

Do you have any newer version you can test? ie windows server 2019, 2022 or 2025?

Re: Active Directory Cannot fetch groups Locally Managed Gateway

the_rock — Sat, 15 Nov 2025 14:27:40 GMT

If you do basic tests/capture from the fw, do you see communication to the AD? Can it ping back and forth? Do port 389,445 and 53 show open?

Re: Active Directory Cannot fetch groups Locally Managed Gateway

Oryx — Sat, 15 Nov 2025 14:28:14 GMT

Nops.

This is an environment from an end customer, so it's pretty old and out of my control. Right now, after removing the old Sophos and put in place the new Check Point 2560, I'm just trying to help the customer to authenticate Remote Access VPN Users with the AD server.

Thanks.

Re: Active Directory Cannot fetch groups Locally Managed Gateway

Oryx — Sat, 15 Nov 2025 14:29:21 GMT

Hi,

Yes. I can ping the server from the Firewall and I can telnet ports 389,445 and 53.

Kind regards.

Re: Active Directory Cannot fetch groups Locally Managed Gateway

Dafna — Sat, 15 Nov 2025 14:33:43 GMT

Please open a task and attach:

cpinfo after you replicates the issue + tcpdump

Re: Active Directory Cannot fetch groups Locally Managed Gateway

the_rock — Sat, 15 Nov 2025 14:34:26 GMT

Just an idea...maybe try turn windows fw off?

Re: Active Directory Cannot fetch groups Locally Managed Gateway

Oryx — Sat, 15 Nov 2025 14:52:32 GMT

😁

Yes, I've checked and it's disabled.

Thanks.

Re: Active Directory Cannot fetch groups Locally Managed Gateway

the_rock — Sat, 15 Nov 2025 17:58:23 GMT

If so, I suggest TAC case.