LDAP APP

[Paloaddict]

We have a rule based on LDAP . However after enabling SLDAP on server end, Palos don't identify it as LDAP rather they identify it as SSL based traffic . what is the ideal way of defining the rule for it now 


1. To define a rule above with Application- ANY and port and protocol as tcp-636. ? is there a better way to define it 
2. To define a rule custom application as SSL using tcp-636 and use it in the rule, how can i do that ? any help will be great

[reaper]

you may need to set up ssl decryption if the server fully encapsulates ldap in a ssl jacket, alternatively you could create a custom app for port 636 with an app override from your network/hosts to the server