topic Re: FMC and LDAP integration specification in Network Security

FMC and LDAP integration specification

FGR — Sun, 21 Nov 2021 04:37:45 GMT

LDAP integration works, but!!!

My FMC operates on VMWare in a management network.

I have an inside network with windows domain controllers.

Hence the FMC is not able to connect with the domain controllers.

This gives a lot of pain to specify the AD Realm. (System / Integration / Realms)

"Download users and groups" is not possible.

Inside Cisco FTD: 192.168.20.0/24 GW 192.168.20.1

URL 192.168.20.19:389

Management ASA: 192.168.30.0/24 GW 192.168.30.1

Cisco FMC: 192.168.30.6

Is it possible to give FMC multiple IP addresses?

balaji.bandi — Sun, 21 Nov 2021 08:09:10 GMT

FMC and LDAP integration simple (from AD point of view you need a Service account, which has privileges to join domain)

FGR — Sun, 21 Nov 2021 17:35:17 GMT

Let me clarify.

The integration VPN LDAP works. That's not the issue here.

It's the connection between FMC and the AD server that does not work.

It's a real pain filling in the "Integration" parameters without actually connecting to the AD server.

FGR — Mon, 22 Nov 2021 03:46:49 GMT

I fixed the problem!

I added a NIC in VMware server and connected it to the VM FMC.

After a reboot of the VM it was visible in FMC configuration Management Interfaces.

I gave it an IP address, and now the User Download works perfectly.