harden EXCH2013

Eprs_Admin
Eprs_Admin used Ask the Experts™
on
Hi Experts,

I have a new EXCH2013 installation.
Now I have to harden this server because it has direct connectivity to outside users (OWA)
I have checked my connection, with www.ssllabs.com
This connection is terrible and has a F rating.

How to bring it to A or A+ ?
SSL3.0 is already disabled but what about the rest ?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Senior Engineer
Commented:
Here is Microsoft's Security checklist for hardening Exchange 2013

https://technet.microsoft.com/en-us/library/aa996026(v=exchg.150).aspx

Go through this and see what your rating is.

Here is another blog to go through.

http://www.monitis.com/blog/nine-steps-to-secure-your-exchange-server/

Between these two you should improve your score.
Tom CieslikIT Engineer
Distinguished Expert 2017

Commented:
The question is what is the rest ?
Without seeing your report it's hard to say what else you can do.
 Certificate?
DKIM ?
etc..
Eprs_AdminSystem Architect

Author

Commented:
Here is my Rating, see the picture.
This is the rating of the server with OWA.

F Rating
Ensure you’re charging the right price for your IT

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

Eprs_AdminSystem Architect

Author

Commented:
...and to fix insecure Renegotiation on EXCH2013 ?
Top Expert 2016
Commented:
obviously ssl 3 is NOT disabled .. use nartac's tool to check and set. https://www.nartac.com/Products/IISCrypto requires reboot
Eprs_AdminSystem Architect

Author

Commented:
ok I will check this tool
In the meantime I have set some configuration on my firewall for the specific virtual IP.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial