Port 636 (LDAPS)
LDAP over TLS: directory queries to Active Directory domain controllers, encrypted.
- Transport
- TCP
- Internet exposure
- Never expose
Should not be reachable from the internet.
Security notes
- Encrypts directory traffic, but still exposes the directory to anyone who can reach it.
- Internal only; never publish domain controllers.
When it shows up in your logs
Same reconnaissance patterns as LDAP on 389.
Related ports
- 389 LDAP
- 3269