Re: Event Log Error Message

Tech-Archive recommends: Fix windows errors by optimizing your registry

Hi Colin,

Thanks for posting here.

From the description, I understand the issue is that you get error in
system log.If I am off base, please don't hesitate to let me know.

Event Id 36874. This appears to be an SSL IIS issue.

Regarding this issue, please first help me to check if you had enabled any
websites which will use SSL on the SBS 2003 site server.
if the answer is Yes, please help me to check if any users had got any
problems to access these SSL site or not.
The 36874 error is most likely from a client that does not support the
level of encrytion, could be a netscape browser.
If any users reported that they got problems to access the IIS web site,
make sure that they are using the Browser which supports the level of
encrytion (For exmaple Internet Explorer).

Anthoer possbile root cause for this issue is one or more of the crypto
protocols has been disabled on the server and the client is asking to use
one of them. The second possibility would be that the client is asking for
a crypto protocol that we simply don''t support.

You can take a look at the following URL for more information:
How to Restrict the Use of Certain Cryptographic Algorithms and Protocols
in Schannel.dll
http://support.microsoft.com/?id=245030

So we need to check if which client computers had problems with access the
web site and genearte this error message.
If none of the client reports any issues, this issue can occur if some
unauthenticated computers tired to acess the SSL web site from outside. In
this condition, you can just simply ignore this error message.

More useful infomation:

http://www.eventid.net/display.asp?eventid=36874&eventno=3884&source=Schanne
l&phase=1


Have a nice day!

Best regards,

Jacky Luo (MSFT)
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
====================================================
PLEASE NOTE: The partner managed newsgroups are provided to
assist with break/fix issues and simple how to questions.
We also love to hear your product feedback! Let us know what you think by
posting

from the web interface: Partner Feedback
from your newsreader: microsoft.private.directaccess.partnerfeedback.

We look forward to hearing from you!
====================================================
When responding to posts, please "Reply to Group" via your newsreader
so that others may learn and benefit from this issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
====================================================

.

Relevant Pages

  • Re: client cert issues
    ... website for ssl ... the client ... > access the system without client cert. ... >>> can access the web site. ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS Server/Client Authentication
    ... check whether you can browse your webpage with ssl but not requst client ... have SSL port 443 set. ... > cert selection window, but when you select a cert and click OK, you ... > the web site, my app runs fine. ...
    (microsoft.public.inetserver.iis.security)
  • General (simple) question on web security
    ... I am currently developing a web site for a client. ... requested that the whole site runs under SSL, ... There are no seperate levels of security required - either they can ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • RE: configuring ssl certificate in multiple website
    ... We can perform follow steps to configure one SSL web site: ... Prepare certificate for this SSL web site ... IIS SSL Configuration Component ...
    (microsoft.public.windows.server.sbs)
  • SSL and IPS (was RE: ssh and ids)
    ... How many simultaneous SSL sessions can be tracked?" ... I assume you're talking about a case in which the client constantly ... If you walk the possible session id space and ... The server chooses the session ID, ...
    (Focus-IDS)