Re: SBS and SSL v.3.0

Tech-Archive recommends: Fix windows errors by optimizing your registry

Given that I don't surf at the server in the first place...why do they recommend this when you shouldn't be surfing there anyway?

Cris Hanna (SBS-MVP) wrote:

don't know know what they are thinking. Don't use firefox or Apache. Not familiar with Qualys or Nessus

--
Cris Hanna [SBS-MVP]
--------------------------------------
Please do not respond directly to me, but only post in the newsgroup so all can take advantage

"SteveB" <swb_mct@xxxxxxx <mailto:swb_mct@xxxxxxx>> wrote in
message news:Oc7zmEtmGHA.4212@xxxxxxxxxxxxxxxxxxxxxxx
Then what are they thinking when they recommend SSL v3.0 ?? Where
is it supported? Apache, Firefox ?

"Cris Hanna (SBS-MVP)"
<crisnospamhanna@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
<mailto:crisnospamhanna@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>>
wrote in message news:eup5a3smGHA.1488@xxxxxxxxxxxxxxxxxxxxxxx
IE 7.0 supports SSL 3.0 IE 7.0 is still in beta and there
are issues in using IE 7.0 with certain SBS features
I would suspect (and its only my opinion) that it may take IIS
7.0 which will come with Windows Server (Longhorn)

-- Cris Hanna [SBS-MVP]
--------------------------------------
Please do not respond directly to me, but only post in the
newsgroup so all can take advantage

"SteveB" <swb_mct@xxxxxxx <mailto:swb_mct@xxxxxxx>> wrote
in message news:uyFE4TsmGHA.3596@xxxxxxxxxxxxxxxxxxxxxxx
When you run either of the two leading vulnerability
scanners (Qualys or
Nessus) against any Microsoft server including SBS2003,
you get the
recommendaton to upgrade to SSL v.3.0. because of specific
flaws in SSL v2.
Is this a simple option to enable in IIS and is it
automatically supported
in Internet Explorer.

I can't find it in IIS.

I am not asking for an assessment of it's importance . .
.Banks are scanned
by one of these two scanners frequently in response to
regulation, and they
run a closed system of Servers and Clients with SSL. If
it just a matter of
clicking a couple of boxes, they could eliminated this
reported
vulnerabiity.

Thanks

.

Relevant Pages

  • Re: Intermittent Network Connections
    ... "CRIS HANNA (SBS-MVP)" wrote: ... >>> Do your server and all you workstations directly connected to a Cable DSL router?? ... No active remote access connections. ...
    (microsoft.public.windows.server.sbs)
  • Re: NDR messages...
    ... Cris Hanna [SBS-MVP] ... Send via Windows Mail on Vista Ultimate connected to SBS 2003 R2 ... I was worried this is pointing to there being a security issue on the server that needed fixing. ...
    (microsoft.public.windows.server.sbs)
  • Re: Help. Loss of OWA and SPS access via Internet after ISA 2004 upgra
    ... Cris Hanna [SBS-MVP] ... Send via Windows Mail on Vista Ultimate connected to SBS 2003 R2 ... I created a web publishing rule pointing to my SharePoint server. ...
    (microsoft.public.backoffice.smallbiz)
  • Re: Still not routing!! Help Please!!
    ... can you post an IP config all from your server??? ... "CRIS HANNA (SBS-MVP)" wrote in ... > Should I enter a static route between Inside and Outside NICs? ...
    (microsoft.public.windows.server.sbs)
  • Re: W2k3 member server not seeing domain users
    ... Cris Hanna [SBS-MVP] ... So how come a SQL installation on this same machine WON'T bring up the ... The member server is showing up in the SBS ADmin list and I can browse ...
    (microsoft.public.backoffice.smallbiz2000)