Hi Guys,
Thank you all,
Alex
From my understanding QoE does a DPI and correlates the ports being used to a list of common port types and what applications typically use them. e.g. port 80 = HTTP, port 1433 = MSSQL. If there are applications that are configured to use custom ports then they can trigger application types that might not directly represent the actual application using them. The QoE agent doesn't look at installed applications on the node, just what traffic is being used.
For the HTTPS question, QoE would simply recognize it as HTTPS. There is a URL filter option in the QoE settings > Manage QoE Application > New HTTP application. I haven't worked on this specifically, i just know it's there.
Thanks Chad, appreciate your help