An administrator needs to connect ISE to Active Directory as an external authentication source and allow the proper ports through the firewall. Which two ports should be opened to accomplish this…

The correct answer is B. LDAP 389 E. MSRPC 445. To integrate Cisco ISE with Microsoft Active Directory, two key protocols and ports must be permitted through the firewall: (B) LDAP on TCP/UDP port 389 is used by ISE to query Active Directory for user and group information during authentication and authorization lookups. (E)…

Architecture and Deployment

Question

An administrator needs to connect ISE to Active Directory as an external authentication source and allow the proper ports through the firewall. Which two ports should be opened to accomplish this task? (Choose two)

Options

ATELNET 23
BLDAP 389
CHTTP 80
DHTTPS 443
EMSRPC 445

How the community answered

(26 responses)

B
88% (23)
C
8% (2)
D
4% (1)

Explanation

To integrate Cisco ISE with Microsoft Active Directory, two key protocols and ports must be permitted through the firewall: (B) LDAP on TCP/UDP port 389 is used by ISE to query Active Directory for user and group information during authentication and authorization lookups. (E) MSRPC on TCP port 445 (SMB/Microsoft RPC) is used for Kerberos-related operations, joining the AD domain, and other AD communication. Telnet (23) and HTTP (80) are not required for AD integration. HTTPS (443) may be used for other ISE functions but is not a core AD communication requirement. These two ports are the minimum needed for ISE-to-AD connectivity.

Topics

#ISE#Active Directory Integration#Network Ports#Authentication Protocols

Community Discussion

No community discussion yet for this question.

Full 300-715 Practice