04-17-2009 12:19 PM
I have noticed that our Directory Services traffic (LDAP) is showing an increase rather than a reduction. I've run into similar issues with Citrix and know that is due to Citrix native compression and encryption and deal with that by altering the policy to use only TFO. However, I don't see why the same thing should happen with LDAP as there are passthrough features for secure LDAP traffic. Does anyone have any ideas? Thanks...
04-17-2009 01:18 PM
Normally pure LDAP is extremely compressable, so I would look at the following classifiers to see if you have some non-LDAP traffic hitting them causing your reporting to be skewed.
Directory-Services
LDAP (optimize full)
match dst port eq 389
match dst port eq 8404
LDAP-Global-Catalog (optimize full)
match dst port eq 3268
LDAP-Global-Catalog-Secure (passthrough)
match dst port eq 3269
LDAP-secure (passthrough)
match dst port eq 636
Maybe an encrypted/compressed application is using one of the LDAP ports?
Dan
04-20-2009 06:21 AM
I agree Dan. I've seen the LDAP traffic being comprseed rather dramatically in the past. I will check it out.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide