Checkpoint lost connection to AD LDAP

[minhhaivietnam]

Hi friends,

I am facing with issue that My checkpoint R81 is losing connection to AD LDAP.

After a reboot of AD server, My checkpoint is saying that it lost connection to LDAP.

This is log it saying:

we have updated new password for account ldap (which is used for Identify Awareness), But problem still exist.

Could someone help me to find rootcause. Thanks you in advance.!!

[Wolfgang]

Maybe there are new updates or configuration on your domain controllers.

Have a look Check Point response to CVE-2021-26414 - "Windows DCOM Server Security Feature Bypass"  and AD-query failed with Microsoft Windows Server 2022 

Check your domain controller logs and better solution will be the identity collector not AD query.

[the_rock · Accepted solution]

I agree 100% with @Wolfgang . I had customer with exact same issue and it was solved by patching their AD server.

[minhhaivietnam]

I check with AD sysadmin, he just upgrade this security patch KB5014702. Not sure if this causes AD query failure ?

[the_rock]

It does.

[minhhaivietnam]

Mr Rock, So could you tell me how to fix this issue?

[the_rock]

Patch AD server with latest updates.

[MathiasB]

I am experiencing the same issue right now after AD received the june patch KB5014702.

However my AD colleagues told me that this is the most recent update. Therefore I'm not quite sure what you mean by "Patch AD server with latest updates."

[Chris_Atkinson]

What is the JHF level of your Gateway?

* Jumbo Hotfix Accumulator for R81.10 starting from Take 55

* Jumbo Hotfix Accumulator for R81 starting from Take 60

* Jumbo Hotfix Accumulator for R80.40 starting from Take 158

* Jumbo Hotfix Accumulator for R80.30 starting from Take 251

* Jumbo Hotfix Accumulator for R80.20 starting from Take 208