Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 18 subscribers
  • Views 4680 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

I want to provide Active directory acces through ZTNA gateway.

Sven Schwager

Hi!

I want to provide Active directory access through ZTNA gateway.

Is it possible to add port ranges to a ZTNA resource?

And do I need to use the External FQDN anywhere at the domain member ? Where?

Is it possible to use just "domain.local" for "internal FQDN" if using multiple domain controller?



This thread was automatically locked due to age.
  • 0

    Hi Sven,

    Currently, a port range cannot be defined while configuring a resource on ZTNA gateway. You can add multiple ports, but cannot define a range. Regarding the second point, could you please provide more info about what you are trying to do?

  • 0 in reply to Tejas Kashyap

    Hi Tejas,

    My second point is about asking if it's possible to connect an OnPremise AD for an remote domain computer about ZTNA agent.

    If possible, this would mean to use just "internaldomain.local" as "internal FQDN" to connect to any DC which is answering, to not rely to just one DC. And next question would be what to use as "External FQDN" so the local Windows client know how to reach AD through ZTNA.

    I suspect it's not possible, as it's expected to use Azure AD. Right?

    Best,

    Sven

  • 0

    You should consider to move to Azure AD for your internal domain.

    There are certain benefits in doing so. ZTNA will not replace your VPN, if you still stick on the entire AD on Premise Stack. 

    __________________________________________________________________________________________________________________

  • 0 in reply to Sven Schwager

    If I understand it correctly, the resources page that you are referring to, is for configuring the resources or applications that have to be accessed through the ZTNA gateway and not for the AD configuration. Having Azure AD is a pre-requisite for authentication and this configuration has to be done on the Identity Providers page. Hope this helps. 

  • 0

    I am also looking for a VPN replacement and was hoping to use ZTNA to redirect AD traffic for domain.local through the ZTNA gateway to the on-prem AD server. Is this possible?

    My other option is just to deploy Windows Always-On VPN.

  • 0 in reply to Jason Bristow

    That is actually not the use case of a ZTNA Product. ZTNA would likely have a Azure AD in place. Azure AD has it own mechanism to sync data to a client. 
    A ZTNA product is to keep the rest connected. 

    __________________________________________________________________________________________________________________

Unfiltered HTML