topic ldaps being id as ssl in General Topics

ldaps being id as ssl

Alex_Samad — Sun, 07 Jun 2020 00:08:49 GMT

So I have a rule

ldap client -> ldap server allow ldap app

ldap app includes ldaps (636)

so I test this

ldapsearch ldaps://ldapserver

gets blocked as ssl.

what am I supposed to do ?

Re: ldaps being id as ssl

BPry — Sun, 07 Jun 2020 03:30:32 GMT

@Alex_Samad,

Update the security rulebase entry that you made (or make a new one) that allows ssl with a custom service object for 636/tcp between the client and the server. Without decrypting the ldaps connection this traffic won't identify properly without it.

Re: ldaps being id as ssl

Alex_Samad — Mon, 08 Jun 2020 03:47:21 GMT

Thats a pain.

so I have a rule that has ldap and default ports. now I need a new rule called ldaps with app ssl and port 636 ...

it is what it is

@BPry if I create my own application - with parent app-id being ssl could I then use that application would the pa use my application ?