<div>
<div class="content wysiwyg-content">
All,<br />
<br />
I am working with another vendor to setup an ASA5505 to accept client VPN via LDAP to a Win2K3 SP2 Active Directory. &nbsp;The Cisco vendor tells me that, to do this properly, we need to do a few things.<br />
1. &nbsp;Need an LDAP username in Account Operators AD group (to enable the password management feature)<br />
2. &nbsp;For password management, LDAP server must be configured for Secure LDAP (LDAP-S on port 636) or SASL MD5<br />
3. &nbsp;Fully qualified DN (all cn=, ou=, dc= fields) for the ASA username<br />
4. &nbsp;Fully qualified path to user container (all ou=,dc= fields)<br />
&nbsp; &nbsp; ASA will search for memberOf status of a group, so VPN users will need to be in a group, and I need that group name (again, fully qualified)<br />
<br />
My question is, how to do item 2? &nbsp;Never done it before. &nbsp;Items 1, 3 and 4 are done.<br />
<br />
Thanks in advance.
</div>
</div>


All,

I am working with another vendor to setup an ASA5505 to accept client VPN via LDAP to a Win2K3 SP2 Active Directory.  The Cisco vendor tells me that, to do this properly, we need to do a few things.
1.  Need an LDAP username in Account Operators AD group (to enable the password management feature)
2.  For password management, LDAP server must be configured for Secure LDAP (LDAP-S on port 636) or SASL MD5
3.  Fully qualified DN (all cn=, ou=, dc= fields) for the ASA username
4.  Fully qualified path to user container (all ou=,dc= fields)
    ASA will search for memberOf status of a group, so VPN users will need to be in a group, and I need that group name (again, fully qualified)

My question is, how to do item 2?  Never done it before.  Items 1, 3 and 4 are done.

Thanks in advance.

Configuring ASA5505 to work with Win2K3 AD with LDAP lookup

Cisco PIX is a dedicated hardware firewall appliance; the Cisco Adaptive Security Appliance (ASA) is a firewall and anti-malware security appliance that provides unified threat management and protection the PIX does not. Other Cisco devices and systems include routers, switches, storage networking, wireless and the software and hardware for PIX Firewall Manager (PFM), PIX Device Manager (PDM) and Adaptive Security Device Manager (ASDM).

Cisco

Hardware-based firewalls provide more sophisticated protection for inbound and outbound traffic than the simple Windows software firewall or the basic NAT firewalls found in routers. These devices implement techniques such as stateful packet inspection, deep packet inspection, and content filtering; and may include built-in antivirus and anti-malware protection.

Hardware Firewalls

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.