<div>
Yes, did this but also had to update to the latest rollup as well to fix the issue
</div>


Yes, did this but also had to update to the latest rollup as well to fix the issue

<div>
<div class="content wysiwyg-content">
In response to the results of a PCI compliance scan, I need to disable the use of SSLv3 to prevent POODLE attacks on my Windows 2012 R2 Standard server. However, when I disable SSLv3 on the Exchange 2013 (CU8) server, Outlook clients are unable to connect, but OWA is still accessible. Currently, SSLv3 is enabled to allow clients to continue using Outlook. SSLv1 and SSLv2 are disabled, along with TLS1.0, and TLS1.1 and TLS1.2 remain enabled.<br />
<br />
What do I need to do to keep Outlook connected to Exchange for clients with SSLv3 disabled on the server?
</div>
</div>


In response to the results of a PCI compliance scan, I need to disable the use of SSLv3 to prevent POODLE attacks on my Windows 2012 R2 Standard server. However, when I disable SSLv3 on the Exchange 2013 (CU8) server, Outlook clients are unable to connect, but OWA is still accessible. Currently, SSLv3 is enabled to allow clients to continue using Outlook. SSLv1 and SSLv2 are disabled, along with TLS1.0, and TLS1.1 and TLS1.2 remain enabled.

What do I need to do to keep Outlook connected to Exchange for clients with SSLv3 disabled on the server?

Disabling SSL 3.0 on server breaks Outlook for clients.

HTTPS is a protocol for secure communication over a computer network which is widely used on the Internet. HTTPS consists of communication over Hypertext Transfer Protocol (HTTP) within a connection encrypted by Transport Layer Security (TLS) or its predecessor, Secure Sockets Layer (SSL). The main motivation for HTTPS is authentication of the visited website and to protect the privacy and integrity of the exchanged data. HTTPS is widely used for protecting page authenticity on all types of websites, securing accounts and keeping user communications, identity and web browsing private.

SSL / HTTPS

Exchange is the server side of a collaborative application product that is part of the Microsoft Server infrastructure. Exchange's major features include email, calendaring, contacts and tasks, support for mobile and web-based access to information, and support for data storage.

Exchange

Microsoft Outlook is a personal information manager from Microsoft, available as a part of the Microsoft Office suite. Although often used mainly as an email application, it also includes a calendar, task manager, contact manager, note-taker, journal, and web browser.

Outlook

A vulnerability is a weakness which allows an attacker to reduce a system's information assurance. Vulnerability is the intersection of three elements: a system susceptibility or flaw, attacker access to the flaw, and attacker capability to exploit the flaw. To exploit a vulnerability, an attacker must have at least one applicable tool or technique that can connect to a system weakness, known as the attack surface. Vulnerability management is the cyclical practice of identifying, classifying, remediating, and mitigating vulnerabilities. Other vulnerabilities include security risks, security defects and constructs in programming languages that are difficult to use properly.

Vulnerabilities

Network security consists of the policies adopted to prevent and monitor authorized access, misuse, modification, or denial of a computer network and network-accessible resources. Network security involves the authorization of access to data in a network, and covers a variety of computer networks; conducting transactions and communications among businesses, government agencies and individuals. Networks can be private, such as within a company, and others which might be open to public access.