LDAP with AWS manageAD which is behind S2S

[Nischal]

Seek some advice regarding a networking setup involving FortiGate and AWS. I've successfully established a site-to-site (S2S) tunnel between our FortiGate firewall and AWS, allowing devices behind the firewall to connect to resources hosted on AWS without any issues.There is a managed AD hosted in AWS.However, I've encountered a bit of a snag when it comes to the FortiGate firewall itself connecting to our LDAP server located on AWS ( Can't contact LDAP server) Also i can ping  successfully to managedAD from devices behind firewall but from firewall console I cannot ping it.

[hbac]

Hi @Nischal,

When connecting to a remote LDAP server over IPsec tunnel, you need to specify the source-ip. Please refer to https://community.fortinet.com/t5/FortiGate/Technical-Tip-Authentication-with-remote-LDAP-via-site-t...

Regards,