topic Re: DMZ server authentication issue in Network Security

DMZ server authentication issue

qbakies11 — Mon, 11 Mar 2019 10:32:04 GMT

I have a DMZ (192.168.4.0/24) setup for my web server on a PIX 515. When I put a laptop (running XP Pro) in the DMZ to test connectivity to the inside it is able to hit all the resources with a ping so I believe that traffic is flowing correctly. Then when I tried to join the laptop to my Active Directory domain I received an error stating that "no endpoints available from the end point mapper". This also happened with a Windows 2003 server but did not happen with a Windows 2000 server. Has anyone else ran into this and know what port need to be opened to allow authentication traffic with the newer Windows operating systems?

I've been trying to troubleshoot this as a Windows issue but I know it's not a DNS issue which is what I'm being told. Any help is appreciated.

Re: DMZ server authentication issue

musethur — Tue, 19 Jun 2007 06:13:18 GMT

I have not come across such an issue b4, but to tell you a suggestion. You should enable logging on terminal (monitor) or console and start analysing the message which will tell you why the pix is dropping the AD join packets. This will help you in identifying the ports that need to be opened.

HTH, Murali

Re: DMZ server authentication issue

anandramapathy — Tue, 19 Jun 2007 09:01:56 GMT

There are too many ports to be opened.

Check the link below.

If it is a critical server, then

I suggest you do an IPSEC tunnel between the server & the DC inside.

Tuff job but doable & secure.

http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/deploy/confeat/adrepfir.mspx

Re: DMZ server authentication issue

qbakies11 — Tue, 19 Jun 2007 11:49:20 GMT

How do I enable the logging on the PIX?

Re: DMZ server authentication issue

anandramapathy — Tue, 19 Jun 2007 12:06:39 GMT

Check this link -

Choose what you want to log the information to

syslog / console etc

http://www.cisco.com/en/US/products/ps6120/products_configuration_guide_chapter09186a0080450bf7.html#wp1047918

hjh - pls rate all useful posts