Firewall Authentication - logon failed

Question

I am attempting to use a Watchguard firebox 550e with Fireware XTM 11 to authenticate incoming traffic for RDP access. I have configured the firewall to use my domain controller for Active directory authentication with a Windows 2000 server farm and added a couple of user accounts to the users list in the firewall, but when I attempt to log onto the authentication page for the firewall, I get Logon failed. I know that the user names work and that the passwords are correct. I am also certain that I have told it to log on using Active Directory instead of the FireboxDB. I have tried using the username alone, the domain\username, and the email address. I believe that the Search base is correct (DC=mydomainname,DC=com), and I did not change any defaults for sAMAccountName (and I do not recall making any changes to those items when configuring the domain structure). Any assistance would be appreciated.

Answer 1

Few suggestions:

• Check to see if you have an LDAP authentication test feature in your Firebox firewall, or find out if there are any logs concerning LDAP authentication.
• Check to see if you have any error's related to LDAP or user acces in your Windows 2000 server security logs.

You'll need to find where this is actually error-ing out (user auth/firewall/server), if logs are not being helpful to you, perhaps tapping the connection with Wireshark in the middle might be helpful.

by the way, what do you mean by: "...and added a couple of user accounts to the users list in the firewall"

Answer 2

Make sure the clocks on the firewall and the AD box are set from the same source, so they are consistent - thats a common issue.