Solved

PCI Scan and SSLv2

Posted on 2010-09-20
3
1,303 Views
Last Modified: 2013-12-04
I have a SBS2008 server running exchange and OWA. My client is very happy with it and makes a lot of use of OWA.

However he also needs PCI Scans to check whether his network is secure from his credit card processing company. This is a requirement and is essentially a fancy port scan. Unfortunately port 443 and OWA fails the security test. This is because OWA accepts SSLv2 connections, in order to pass the test I must restrict the server to only accept SSLv3 connections.

Anyone already dealt with this, these security scans are pretty commonplace.
0
Comment
Question by:FutureOak
  • 2
3 Comments
 

Author Comment

by:FutureOak
Comment Utility
Sorry I should have added more info. I have already found the KB article

http://support.microsoft.com/kb/187498

Which talks about it but the settings do not seem to relate to my SBS2008 install. It talks about keys in

HKey_Local_Machine\System\CurrentControlSet\Control\SecurityProviders \SCHANNEL\Protocols

My server has only one key in there for SSL 2.0. However this is for the client only and the article talks about changing the server entry in the registry.

I think I am in the right area but dont fancy randomly changing regisitry settings that 'look right' on a production server :)
0
 
LVL 35

Accepted Solution

by:
Cris Hanna earned 500 total points
Comment Utility
0
 

Author Closing Comment

by:FutureOak
Comment Utility
Spot on, I followed the article, they ran a PCI test last night and the server in question passed, many thanks
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

OfficeMate Freezes on login or does not load after login credentials are input.
This process describes the steps required to Import and Export data from and to .pst files using Exchange 2010. We can use these steps to export data from a user to a .pst file, import data back to the same or a different user, or even import data t…
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…
In this Micro Video tutorial you will learn the basics about Database Availability Groups and How to configure one using a live Exchange Server Environment. The video tutorial explains the basics of the Exchange server Database Availability grou…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now