-
Products
-
SonicPlatform
SonicPlatform is the cybersecurity platform purpose-built for MSPs, making managing complex security environments among multiple tenants easy and streamlined.
Discover More
-
-
Solutions
-
Federal
Protect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions
Learn MoreFederalProtect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions
Learn More - Industries
- Use Cases
-
-
Partners
-
Partner Portal
Access to deal registration, MDF, sales and marketing tools, training and more
Learn MorePartner PortalAccess to deal registration, MDF, sales and marketing tools, training and more
Learn More - SonicWall Partners
- Partner Resources
-
-
Support
-
Support Portal
Find answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials
Learn MoreSupport PortalFind answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials
Learn More - Support
- Resources
- Capture Labs
-
- Company
- Contact Us
Impact for LDAP channel binding and LDAP signing requirements
03/26/2020 
54 People found this article helpful
479,436 Views
Description
Microsoft announce that "LDAP Channel Binding and LDAP Signing Requirements" is scheduled coming Windows update on March 2020.
AD authentication for the SSLVPN user will be affected with its update and describe how to avoid its impact beforehand.
Cause
In an upcoming release in March 2020, Microsoft will provide a Windows update that by default will change the LDAP channel binding and LDAP signing to more secure configurations
https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV190023
Resolution
- Who is affected?
- SMA100 users who uses AD for authentication.
- SMA1000 users who uses AD basic and AD Advance.
- How to avoid the influences?
Both SMA100 & SMA1000 need to enable SSL/TLS feature for LDAP.
SMA100 series
- Navigate to Portals|Domains then select Active Directory domain.
- Enable Use SSL/TLS for LDAPS authentication.
NOTE: TCP 636 port needs to be opened /listening at Windows Server and also CA cert for LDAPS needs to be imported into the SMA appliance.
SMA1000 series
- Access Management Console and move to System Configuration |Authentication Servers.
- Click Edit for AD basic or AD advanced authentication servers.
- Enable Use SSL to secure directory server connection under Active directory over SSL.
- Save and pending change apply the configuration change.
NOTE:TCP 636 port needs to be opened /listening at Windows Server and also CA cert for LDAPS needs to be imported into the SMA appliance.
Related Articles
- How to Set Timeout for Inactive Tunnel Connections
- Commands for silent installation of NetExtender via CMD line
- Users on Netextender 10.3.0 version failing to connect with the following error message " Cannot get a response from the server "
YES
NO