AD Integration on Identity Awareness and Mobile Access

[mel_lancholic]

Hi!

I successfully integrated the AD using NAT, all users were reflected in the logs, indicating that the integration was successful. Now, I attempted to enable the Identity Awareness and Mobile Access Blades but I've encountered this issue saying:

"SmartDashboard could not connect - Could not communicate with server." 

To add up:

• Is it possible to establish a connection for Identity Awareness and Mobile Access given that the AD is connected via NAT?
• If it's possible, what is needed for the integration?

Kindly refer to the attached diagram to properly grasp the topology. Thanks!

[PhoneBoy]

For Identity Awareness and/or MAB, the gateways must be able to reach the AD server directly to look up groups. 
That would mean the NAT gateway would need to allow connectivity from the gateway on LDAP ports (TCP 389 and/or 636).
I don't believe there are any other considerations here.

[mel_lancholic]

I've tried using the ports 389 and 636, the NAT gateway is reachable when I tried to ping but the issue is still the same which is "SmartDashboard could not connect - Could not communicate with server.", is there another way to resolve this issue? Thanks.

[PhoneBoy]

Did you take packet captures while attempting to configure this?
Perhaps that will give you a hint of what else might be needed.