Disable SSL on Exchange

It will work. It's just that when someone uses a public wifi (or any other network that's not their home or office connection), the traffic can be decoded quite easily (meaning, no privacy, all the email can be read in an instant). This obviously requires a hacker on that same foreign network.

This may be above my original question, but have you ever done this and what steps did you follow. If  this is above the original question and you choose not to answer i understand.

You will encounter issues...
Exchange Server server that hosted the Client Access server role has SSL required by default for services such as:

    Outlook Web App (OWA)
    ActiveSync (mobile device access)
    Exchange Web Services
    Outlook Anywhere (aka RPC-over HTTPS)

May we know why you want to disable the ssl?

the security team see it as a vulnerability. We will continue using TLS but they want to remove SSL.

The only issue i encountered by a 3rd party security auditing was that my ssl had to 1024 bit encryption instead of 2048. The auditor also gave us crap about it not being bought from a "trusted" seller.that was resolved by showing them that our exchange ssl was bought from a authorized godaddy reseller.I'm curious why is it a vulnerability from their view?

Our SSL cert is also from a 3rd party and it 2048, but they want to disable SSL on the server side and client side of Exchange. Its also because of auditing. I have a call into Microsoft to see what they say also. I'm also curious about what you guys say here at the exchange.

Well tim you need it as shown on the list, prior to exchange 07 it wasnt required but you will encounter various authentication issues and errors on the client side just to name a couple .you would think they'd know and tell u more about disabling ssl on exchange. Ive never heard of anyone saying u have to disable ssl unless they ask u to replace it..unless you dont require external access then u can use a self signed ssl.

After communicating with Microsoft they assured me that disabling SSL will not cause any issues other than devices that only speak SSL but that is rare.