5 ways to use LDAP/LDAPS Configuration with FortiGate firewall

preview_player
Показать описание
This video covers how to configure a FortiGate to connect to an LDAP and LDAPS server - along with 5 real world scenarios to reference LDAP/LDAPS credentials.

0:00 Overview
0:11 LDAP Configuration
2:13 LDAPS Configuration
9:52 Group Configuration
10:23 Scenario#1 - Administrator Logon
12:05 Scenario#2 - SSL VPN Authentication
13:37 Scenario#3 - IPsec VPN Authentication
14:54 Scenario#4 - Captive Portal with 4 methods
19:49 Scenario#5 - Single Sign On (AD Direct Polling)
Рекомендации по теме
Комментарии
Автор

I don't understand why the CA certificate must be installed on the ldap server. Why is it a prerequisite ? As long as the fortigate has the ca certificate, it has the public key that gives the fortigate the ability to validate the server certificate that the ldap server is providing. Do you have an idea why it is a prerequisite ? Thanks

lucas
Автор

Any benefit of using IPsec vs just SSL VPN?

livestronger
Автор

A stock Active Directory is configured to accept only LDAP (port 389) request only, and adding certs like you did will not make LDAPS requests work on port 636. You need to configure your AD to accept LDAPS request which you didn't show.

Traumatree
Автор

cloud you please make a video for the certificate creation from FortiAuth.

Aymanb
Автор

how did you get the server certificate @4:16

Aymanb