Network Port: 636
Network Port Reference Guide
Registered Service Name
LDAPS (Secure LDAP)
Transport Protocol
TCP
Functional Overview
Port 636 is used for LDAP over SSL/TLS (LDAPS), providing encrypted identity directory lookups and secure domain authentication.
Security Risks & Vulnerabilities
Requires valid SSL/TLS certificates. Ensure weak TLS 1.0/1.1 protocols are disabled and expired certificates are renewed promptly.
How to audit network port status
1. Scan Open Ports: Use our Port Scanner utility to verify if this port is actively listening on your host.
2. Verify Encryption: Audit the service layer to confirm SSL/TLS is protecting transmission payload.
3. Hardening Rules: Apply the firewall instructions below to shut down unauthorized inbound ports.
UFW Firewall Rules
Allow Command
sudo ufw allow 636/tcp
Block Command
sudo ufw deny 636/tcp
iptables Firewall Rules
Allow Command
sudo iptables -A INPUT -p tcp --dport 636 -j ACCEPT
Block Command
sudo iptables -A INPUT -p tcp --dport 636 -j DROP
Port Diagnostic Tools
Authoritative Standards
Port assignments governed by IANA. Well-known ports (0–1023) require IANA approval per RFC 6335.