Security

LDAP (Lightweight Directory Access Protocol)

A protocol for querying and modifying directory services such as Active Directory. Appliances and applications use it to look up users and groups, typically binding with a stored service-account credential.

Deep dive

Learn Article

What an Appliance's LDAP Service Account Can Read in Active Directory

VPN gateways, firewalls and mail appliances bind to Active Directory with a service account. What that account can read is what an attacker gets the day the appliance falls.

intermediate 4 min read

Back to glossary