Solved

Exchange 2013 breaks after disabling TLS 1.0 - Version 15.0 (Build 1156.6)

Posted on 2016-11-04
1
127 Views
1 Endorsement
Last Modified: 2016-11-09
After we disabled TLS 1.0 on the Exchange server running version 15.0 (Build 1156.6), all mail flow stopped. I know it was a known issue until early this year so I wondering if the issue has been resolved in any of the three Cumulative Updates released this year (12, 13 or 14)?

In my research I found this patch - https://support.microsoft.com/en-us/kb/3045301 - which was included in the CU8, but I see that we have CU11 installed on the server.

We are planning on installing CU14 in hopes that it resolves the issue, please let me know if anyone has any feedback on this issue or patch.

Thank you for your help.
1
Comment
Question by:Daaniyal Kalim
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 2

Accepted Solution

by:
Mikhail Sartaev earned 500 total points
ID: 41876021
https://blogs.technet.microsoft.com/exchange/2015/07/27/exchange-tls-ssl-best-practices/
SMTP is notably a protocol where Exchange acts as both a client and a server. Some older server implementations have been observed to incorrectly implement version negotiation.  In these cases, the remote servers terminate the connection when Exchange (acting as a client) offers a version newer than TLS 1.0.
0

Featured Post

Free NetCrunch network monitor licenses!

Only on Experts-Exchange: Sign-up for a free-trial and we'll send you your permanent license!

Here is what you get: 30 Nodes | Unlimited Sensors | No Time Restrictions | Absolutely FREE!

Act now. This offer ends July 14, 2017.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to resolve IMCEAEX NDRs in Exchange or Exchange Online related to invalid X500 addresses.
This article will help to fix the below error for MS Exchange server 2010 I. Out Of office not working II. Certificate error "name on the security certificate is invalid or does not match the name of the site" III. Make Internal URLs and External…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question