LDAPS option has been depricated in 10.8

Products Auditor Ideas
, ,
1

What is a one sentence summary of your feature request?

Enable TLS/SSL again!

Please describe your idea in detail. What is your problem, why do you feel this idea is the best solution, etc.

With Nevada’s recent cyber-attack 2025, we are aggressively working on hardening our infrastructure, which one of the options is disabling LDAP, and enabling LDAPS port 636.

It appears to now be deprecated in Auditor 10.8.

AI Query reports:

The Real Behavior in Netwrix Auditor 10.8
In version 10.8, Netwrix made a design change:
There is no longer a UI option to enable LDAPS (port 636) for Active Directory data collection.
Instead:

Netwrix Auditor always uses standard LDAP/GC ports (389/3268) for domain discovery.
When secure communication is supported, Auditor automatically uses Global Catalog SSL (port 3269) — but only under specific internal conditions.
Auditor 10.8 does not support forcing LDAPS (port 636) in the UI.

This is not a bug or misconfiguration — it’s the intended behavior for 10.8.

How do you currently solve the challenges you have by not having this feature?

I can’t solve it. LDAPS has been removed from current version 10.8 15792.

Is there a method for securing this communication, Certificate signing?

2

Thank you for raising this.

Nothing has changed in Netwrix Auditor 10.8 regarding LDAPS support. Netwrix Auditor has not historically relied on LDAPS (port 636) for Active Directory data collection, so it was not removed or deprecated in this version.

Instead, the product uses LDAP with Sign and Seal, which provides encryption and integrity protection for LDAP traffic through the standard Windows security mechanisms (Kerberos/NTLM).

If your environment recently changed security settings (for example enforcing LDAP signing or modifying domain controller policies), it is possible that the communication stopped working due to configuration changes rather than a product behavior change.

If you continue experiencing issues, please open a support case so the team can review your environment configuration in detail.

Thank you