To enable LDAP over SSL for a Vault when DNS lookups are blocked, which step...

Add the FQDN & IP details for each LDAP host into the local hosts file of the Vault server. Most Voted

Configure an AllowNonStandardFWAddresses rule in DBParm.ini on the Vault to allow outbound TCP 53 to the organization’s DNS servers.

Ensure LDAP hosts added to the directory mapping configuration are defined using only IP addresses.

Set the ReferralsDNSLookup parameter value to “No” in the directory configuration.