In reply to Pranathi Mamidi.

Hi Panathi,
This is not an idea - this is a product you can start using right now: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/avc/sd-avc/1-1-0/ug/sd-avc-1-1-0-ug.html

SD-AVC works on top of NBAR which already classifying encrypted traffic as well.
In addition, you should stay tuned - with SD-AVC 2.1.0 you will be able to investigate generic hosts and sockets.