Active directory authentication with SSL/TLS

Hi,

you will need to add an exception to the TLS list for your server.

Ian

added the ip address of AD server to Local TLS exclusion list but not working 

In hindsight you shouldn't need an exclusion for an internal server, so what does logviewer show when you search on the server I address?

Ian

SSL / TLS needs some configuration on AD Server End. Did you do that step? 

No , what's the steps Please 

Thats something, you need to verify on the AD end. There are plenty of documentation guides on the microsoft website, how to enable TLS1.2 for AD servers ldap.

Hello Sir 

I followed the following Official links from microsoft and applied at active directory server but not working .

Protocols in TLS/SSL (Schannel SSP) - Win32 apps | Microsoft Docs

Managing SSL/TLS Protocols and Cipher Suites for AD FS | Microsoft Docs

when i click connection test from sophos the following error appear : Device - AD server connectivity test failed

I installed CA on Active Directory Server and currently the connection between Sophos xg firewall and AD working by use TLS/SSL

Thanks everyone on your support .

I installed CA on Active Directory Server and currently the connection between Sophos xg firewall and AD working by use TLS/SSL

Thanks everyone on your support .

Can you help me to  configure AD working TLS/SSL

hello 

Wich CA did install and where ?*

Thanks

You have to install Activate Directory Certificate Services role and restart server to complete installation 

Hello

I have do it; but the same problem. 

Thanks

can you attach server authentication setting on Sophos for review with you  

I have'n a problem when using 389 port. I just change the connection security mode to ssl/tls

when you press test connection what's the error message .

test connection failed as server is down or unreachable

if you want will prepare remote session by anydesk next week to review your configuration on server and firewall