PKS@ asked a question.
Disable support for SSL 3.
Our Snow tool URL samsnowdevgateway.omya.com and samsnowprodgateway.omya.com is based on external web which is not following the best practices as per Omya security polices, so we need this to be fixed.
We need to:
1. Disable support for SSL 3.0 and TLS1.1
2. Disable deprecated ciphers, including: MD4, MD5, RC2, RC4 and EXP.
Hey,
You can disable these on the Server using IISCrypto. However, when you disable it on the server you need to also disable it on the clients.
The server can't have TLS 1.1 disabled and the client have it enabled, as the connection will fail.
Those ciphers can also be disabled, same thing applies (I believe), needs to be disabled on both. We've disabled them on both and everything is working OK.
Laim
As Laim says this isn't a Snow specific issue more a server/client configuration issue.
Needs to be done at both ends within you network boundaries.
👌 to using IISCrypto, it makes disabling this stuff so much easier.
rip my inbox. @Karen Peacock​
But what a good way to increase your community score :-)
brb going to make a python bot that replies to every post on the community with "is this still an issue?"