topic Cisco FTD LDAPs in Network Access Control

Cisco FTD LDAPs

Imm — Fri, 28 Jan 2022 12:36:28 GMT

Hello,

I Would like to integrate my Cisco FTD (Version 6.6.4) with Active Directory (2019) using LDAPS over SSL. But we get this error (see attachment). Integration with pure LDAP works fine. But we need LDAPS over SSL.

How I can configure this? Are there any additional manipulations in Active Directory?

Thanks.

Re: Cisco FTD LDAPs

Mark Elsen — Fri, 28 Jan 2022 16:21:13 GMT

- Check if this thread can be helpful : https://community.cisco.com/t5/network-security/firepower-1120-ldaps-not-working-but-ldap-is/td-p/4048083

Re: Cisco FTD LDAPs

Aref Alsouqi — Sat, 29 Jan 2022 15:08:10 GMT

Did you configure the LDAPS FQDN or the IP? I would configure the FQDN and make sure it is included in the used certificate as a CN or a SAN.

Re: Cisco FTD LDAPs

sadist001 — Sat, 29 Jan 2022 18:50:57 GMT

I configured IP. I will try to change from IP to FQDN.

Re: Cisco FTD LDAPs

Aref Alsouqi — Sat, 29 Jan 2022 19:09:07 GMT

and please don't forget to create a DNS entry on your DNS server for that FQDN.

Re: Cisco FTD LDAPs

Imm — Thu, 03 Feb 2022 06:32:14 GMT

Problem has been solved.

Just need to add LDAPs Root CA into Object/PKI/Cert Enrollment and then add this cert on FTD Devices/Certificates/Add.