?
Solved

PCI Scan and SSLv2

Posted on 2010-09-20
3
Medium Priority
?
1,320 Views
Last Modified: 2013-12-04
I have a SBS2008 server running exchange and OWA. My client is very happy with it and makes a lot of use of OWA.

However he also needs PCI Scans to check whether his network is secure from his credit card processing company. This is a requirement and is essentially a fancy port scan. Unfortunately port 443 and OWA fails the security test. This is because OWA accepts SSLv2 connections, in order to pass the test I must restrict the server to only accept SSLv3 connections.

Anyone already dealt with this, these security scans are pretty commonplace.
0
Comment
Question by:FutureOak
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 

Author Comment

by:FutureOak
ID: 33717346
Sorry I should have added more info. I have already found the KB article

http://support.microsoft.com/kb/187498

Which talks about it but the settings do not seem to relate to my SBS2008 install. It talks about keys in

HKey_Local_Machine\System\CurrentControlSet\Control\SecurityProviders \SCHANNEL\Protocols

My server has only one key in there for SSL 2.0. However this is for the client only and the article talks about changing the server entry in the registry.

I think I am in the right area but dont fancy randomly changing regisitry settings that 'look right' on a production server :)
0
 
LVL 35

Accepted Solution

by:
Cris Hanna earned 2000 total points
ID: 33722290
0
 

Author Closing Comment

by:FutureOak
ID: 33743724
Spot on, I followed the article, they ran a PCI test last night and the server in question passed, many thanks
0

Featured Post

Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Lotus Notes – formerly IBM Notes – is an email client application, while IBM Domino (earlier Lotus Domino) is an email server. The client possesses a set of features that are even more advanced as compared to that of Outlook. Likewise, IBM Domino is…
Learn to move / copy / export exchange contacts to iPhone without using any software. Also see the issues in configuration of exchange with iPhone to migrate contacts.
In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to: http://www.codetwo.com/excha…
Suggested Courses
Course of the Month10 days, 5 hours left to enroll

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question