You can configure Identity Synchronization for Windows to use LDAP over SSL everywhere that components use LDAP.
All access to Message Queue is protected with SSL.
You must use SSL between the Active Directory
Connector and Active Directory when you are synchronizing from Directory Server
to Active Directory.