How to connect endian firewall with ldap server in RED zone

[Guest]

[juco]

I am using a DMZ schema with 2 endian firewalls,
Something like this

LAN ----- Efw-1 ----- DMZ ------ Efw-2 ----- WAN
    Green         Red       Green       Red


Every thing is working fine, but now, I need to connect my internal firewall (Efw-1) to a LDAP Server in DMZ (RED zone to Efw-1). In order to authenticate my HTTP proxy's users with this LDAP. I tried many ways but no one works

[Di4bLo]

Did you enable the Inter-Zone traffic enable from GREEN to ORANGE and ORANGE TO GREEN?
 

[juco]

No, I didn't. In my Endia1 I have enabled GREEN an RED zones, and the same in Endian2
Is it necesary? (add and enable a ORANGE zone in my Endian2?)   

My scenario is:

Endian1 (Internal)
*******
GREEN - 10.15.33.10/24 (LAN's IP Range)
RED - 172.15.33.2/28
******************
DMZ - 172.15.33.0/28
******************
Endian2 (External)
*******
GREEN - 172.12.33.1/28
RED - 10.15.32.10/29 (WAN's IP Range)

[juco]

sorry.... the IP in Endian2 is 172.15.33.1/28

Endian2 (External)
*******
GREEN - 172.15.33.1/28
RED - 10.15.32.10/29 (WAN's IP Range)

[Di4bLo]

No it's not necessary.
First of all try to ping the LDAP server from the console of you Endian1 and try to ping the domain.
Add your LDAP server to the Hosts and check the time: must be synchronised with the domain controller.
Let me know.

[svritc_81]

Try to configure your internal firewall in bridge mode and your external firewall as is no changes

make sure you are able to communicate your LDAP Server from LAN and open incoming and outgoing ports for LDAPs traffic.

[svritc_81]

EFW bridging is available with version's 3.x if your efw is below 3.x you may need to upgrade.