ISE and AD integration - Port 445 requirement

[meetneelesh79]

Team,

I am working with one of the customers for ISE POC. Customer is using Microsoft AD for identity store but port 445 is blocked on customer network. I have following queries with respect to ISE and AD integration.

1. Why "SMB - 445" port is required for ISE and AD integration?

2. If SMB-445 port is not enabled on the network, will ISE and AD integration work?

When I search on internet, LDAP and SMB has same usage

Thanks,

Neelesh Marathe

[hslai · Accepted solution]

The recent vulnerability is on SMBv1. ISE-AD integration uses SMBv2, which also on TCP 445. Correct, it requires to allow such connections from ISE to the AD infrastructure for the integration to work.

[meetneelesh79]

Thank you very much Hsing for your inputs.