https://live.paloaltonetworks.com/t5/general-topics/ldap-app/m-p/246093#M75252 <P>We have a rule based on LDAP . However after enabling SLDAP on server end, Palos don't identify it as LDAP rather they identify it as SSL based traffic . what is the ideal way of defining the rule for it now&nbsp;<BR /><BR /><BR />1. To define a rule above with Application- ANY and port and protocol as tcp-636. ? is there a better way to define it&nbsp;<BR />2. To define a rule custom application as SSL using tcp-636 and use it in the rule, how can i do that ? any help will be great</P><P>&nbsp;</P> Tue, 15 Jan 2019 14:38:16 GMT Paloaddict 2019-01-15T14:38:16Z https://live.paloaltonetworks.com/t5/general-topics/ldap-app/m-p/246093#M75252 <P>We have a rule based on LDAP . However after enabling SLDAP on server end, Palos don't identify it as LDAP rather they identify it as SSL based traffic . what is the ideal way of defining the rule for it now&nbsp;<BR /><BR /><BR />1. To define a rule above with Application- ANY and port and protocol as tcp-636. ? is there a better way to define it&nbsp;<BR />2. To define a rule custom application as SSL using tcp-636 and use it in the rule, how can i do that ? any help will be great</P><P>&nbsp;</P> Tue, 15 Jan 2019 14:38:16 GMT https://live.paloaltonetworks.com/t5/general-topics/ldap-app/m-p/246093#M75252 Paloaddict 2019-01-15T14:38:16Z https://live.paloaltonetworks.com/t5/general-topics/ldap-app/m-p/274589#M75253 you may need to set up ssl decryption if the server fully encapsulates ldap in a ssl jacket, alternatively you could create a custom app for port 636 with an app override from your network/hosts to the server Wed, 03 Jul 2019 11:11:43 GMT https://live.paloaltonetworks.com/t5/general-topics/ldap-app/m-p/274589#M75253 reaper 2019-07-03T11:11:43Z