Documentation | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Troubleshooting > Forcepoint Web Security interoperability issues > Directory Agent communication issues
Directory Agent communication issues
Administrator Help | Forcepoint Web Security | v8.5.x
If Directory Agent is prevented from communicating with directory service to gather user information, or if Directory Agent cannot connect to Sync Service, updated user and group information cannot be sent to the hybrid service.
Communication problems can occur if:
*
There is problem in the network.
*
The ports used for directory service (see table) or Sync Service (55832) communication are blocked between the Directory Agent machine and the target machine.
 
Port
Used for:
139
NetBIOS communication: Active Directory
389
LDAP communication: Active Directory, Novell eDirectory, Oracle (formerly Sun Java) Directory Server
636
SSL port: Novell eDirectory, Oracle (formerly Sun Java) Directory Server
3268
Active Directory
3269
SSL port: Active Directory
*
Directory Agent is using incorrect credentials, or the target service is unable to authenticate the connection.
*
A service is not available, because of a service restart or a machine reboot, for example.
To determine what is causing the communication problem, consult the Windows Event Viewer or websense.log file for detailed information.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Troubleshooting > Forcepoint Web Security interoperability issues > Directory Agent communication issues
Copyright 2023 Forcepoint. All rights reserved.