Solved

Improve Security on SBS 2011

Posted on 2016-09-12
5
34 Views
Last Modified: 2016-10-08
HI -
We are trying to be more secure so a client can accept credit cards.  The firm that inspects our vulnerabilities produced the following.  I thought i had addressed this in the security section of SBS 2011 but it appears that i did not.  Any, and all, detailed information on how to correct this would be so appreciated.

Thanks
Rich
The SSL-based service running on this host appears to support the use of "weak" ciphers such as:

- Ciphers suites that have key-lengths of less than 128 bits.

- Ciphers suites using anonymous Diffie-Hellman algorithms (no authentication).

- Ciphers suites offering no encryption.

- Ciphers suites using pre-shared keys.

- Ciphers suites using RC4 or MD5.
0
Comment
Question by:webentpr
  • 2
  • 2
5 Comments
 
LVL 62

Accepted Solution

by:
btan earned 250 total points (awarded by participants)
ID: 41794434
Try running iiscrypto using its best practice. It helps to set the cipher required in baseline to secure the server to use strong cipher. This only set the cipher on the OS and you need to make sure the appl config changes separately, applicable.
https://www.nartac.com/Support/IISCrypto/FAQ

https://www.nartac.com/Blog/post/2013/04/19/IIS-Crypto-Explained.aspx

If server is accessible via Internet, I suggest a self assessment using the ssl lab test. It does a good snapshot on the cipher used.
https://www.ssllabs.com/ssltest/
0
 
LVL 30

Assisted Solution

by:pgm554
pgm554 earned 250 total points (awarded by participants)
ID: 41794656
0
 

Author Comment

by:webentpr
ID: 41796398
First let me apologize for taking so long to respond.  I will try this - thank you.
0
 

Author Comment

by:webentpr
ID: 41804881
Thanks - everything worked correctly - really appreciate your help.
Rich
0
 
LVL 62

Expert Comment

by:btan
ID: 41834886
As per advised and acknowledged.
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Never store passwords in plain text or just their hash: it seems a no-brainier, but there are still plenty of people doing that. I present the why and how on this subject, offering my own real life solution that you can implement right away, bringin…
In 2017, ransomware will become so virulent and widespread that if you aren’t a victim yourself, you will know someone who is.
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

24 Experts available now in Live!

Get 1:1 Help Now