Cisco Firepower AD_Active authentication_ browser_internal_error_500

[Osipov_DG]

We are deploying Cisco Firepower Appliance to perform advanced url filtering and user authentication for user internet access. During deployment we faced a problem with active user http\https authentication using system-provided HTTP response page. After configuring Firepower system for active user http\https authentication according to instructions provided on cisco website(http://www.cisco.com/c/en/us/support/docs/security/asa-firepower-services/200329-Configure-Active-Directory-Integration-w.html#anc8) users are redirected to http response page, but after entering correct user credentials in appropriate fields users get "Internal server error 500" in their browser and nothing happens. There are no any log entries about user authentication in events list and users can't access web pages. URL filtering is not an issue, we've put an explicit permit rule in access-policy list. SSL-inspection rule is active, and works properly. We're using default http response page.

[yogdhanu]

Hi

I would suggest to open TAC case for this problem. httpsd logs needs to be checked to find if there are errors on the web server which is throwing the page.

Please also make sure that the firepower sensor has direct connectivity to AD server.

Hope it helps,

Yogesh