> Source: [sk80880](https://support.checkpoint.com/results/sk/sk80880)

# sk80880 - Prioritizing LDAP queries for different gateways

| Property | Value |
|----------|-------|
| Solution ID | sk80880 |
| Date Created | 2012-08-10 |
| Last Modified | 2014-09-02 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |

## Symptoms

- * When Management is querying the LDAP - the LDAP query is successful.
* When the Gateway is querying the LDAP (such as in Client Authentication or Remote Client) - query fails

## Cause

The following topology is set:  
- Management is Located in the Internet (with public IP)  
- LDAP is located in the Internal network, statically NATed behind the firewall  
**- The LDAP object is configured with the public IP**

Where the LDAP object is configured with the public IP the following occurs behind the scenes:

(1) Accessing the LDAP from the Internet:

The Management extracts the LDAP IP based on the configuration in the LDAP Account Unit object.  
In this case, since the LDAP object was configured with the LDAP public IP any queries will be made to the LDAP public IP.

Authentication will be **successful**.

(2) User Authentication in front of the LDAP:

When user authentication is required, the firewall is the one performing the queries to the LDAP.  
Once again, since the LDAP object was configured with the public IP, the traffic originated from the firewall will seek the LDAP public IP as destination.  
In this case, the queries will be forwarded via the external firewall interface and will never reach the LDAP server.

Authentication will **fail**.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content