Link to home
Start Free TrialLog in
Avatar of Phil Bailey
Phil Bailey

asked on

Exchange server 2016 how to find source or "An SSL 2.0 connection request was received from a remote client application"?

In the System Logs I see error Event ID 36874 Schannel. An SSL 2.0 connection request was received from a remote client application, but none of the cipher suites supported by the client application are supported by the server. The SSL connection request has failed.
How can I find the source of this connection? 
Avatar of David Johnson, CD
David Johnson, CD
Flag of Canada image

enable TLS on every server (iiscryto is your friend)
https://www.exchangemaster.ch/faq000164/
How can I find the source of this connection?
IIS logs might have something though SSL 2.0 is disabled by default so I wouldn't worry about it
I see these entries on my exchange server all the time because of insecure clients trying to connect
I locked down my server even more last month by disabling certain cipher suites and TLS 1.0/1.1
modern/supported clients and operating systems should have no issues connecting to exchange using 1.2

This question needs an answer!
Become an EE member today
7 DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform.
View membership options
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.