Yea, it was connected at for a while but I changed the connections between the layer 3 switch and the ASA. Since then, the connection to the AD server has failed. It's like the MX can use the LAN connection to locate the server since it's on a different subnet.