W2008R2: still access my server with ssl2 after I have disabled ssl2 for client/server and enable ssl3

I have a W2008 R2 server detected by Nessus vulnerability scan as using ssl2.
After I edit my registry as below and reboot. I try using Internet Explorer, and tick only SSL2 (uncheck all SSL3 and TLS)
I can still access my server port 443 with SSL2. That port is used by customer's custom web application.
Can the web application still using ssl2 as its secure connection after we have disabled it in OS level?
current registry setting as below: I have tested http://www.petenetlive.com/KB/Article/0000280.htm
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL]
"EventLogging"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\AES 128/128]
"Enabled"=dword:ffffffff
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\AES 256/256]
"Enabled"=dword:ffffffff
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\DES 56/56]
"Enabled"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\NULL]
"Enabled"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC2 128/128]
"Enabled"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC2 40/128]
"Enabled"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC2 56/128]
"Enabled"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 128/128]
"Enabled"=dword:ffffffff
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 40/128]
"Enabled"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 56/128]
"Enabled"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 64/128]
"Enabled"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\Triple DES 168/168]
"Enabled"=dword:ffffffff
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\CipherSuites]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Hashes]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Hashes\MD5]
"Enabled"=dword:ffffffff
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Hashes\SHA]
"Enabled"=dword:ffffffff
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\Diffie-Hellman]
"Enabled"=dword:ffffffff
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\PKCS]
"Enabled"=dword:ffffffff
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\Multi-Protocol Unified Hello]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\Multi-Protocol Unified Hello\Server]
"Enabled"=dword:00000000
"DisabledByDefault"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\PCT 1.0]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\PCT 1.0\Server]
"Enabled"=dword:00000000
"DisabledByDefault"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Client]
"DisabledByDefault"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server]
"Enabled"=dword:00000000
"DisabledByDefault"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server]
"Enabled"=dword:ffffffff
"DisabledByDefault"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server]
"Enabled"=dword:ffffffff
"DisabledByDefault"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server]
"Enabled"=dword:ffffffff
"DisabledByDefault"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server]
"Enabled"=dword:ffffffff
"DisabledByDefault"=dword:00000000

Hi,
I noticed that the guidance is for SBS. You can recover the registry key if you have a backup. I suppose you should have a backup.
Then you give the following method a try.
How to disable SSL 2.0 on Windows Server 2008 R2
http://blogs.msdn.com/b/httpcontext/archive/2012/02/17/how-to-disable-ssl-2-0-on-windows-server-2008-r2.aspx
Hope this helps.

Similar Messages

Sync with iMac after you have already got the iPad on and said no intially

When I first turned the iPad on, I did not Sync the applications. It is possible to go back and sync the Microsoft office from my iMac? And how do you do that > - I can't find it and it doesn't drag over.

You can only sync applications which were written for iOS (ie iPad, iPhone, etc).
Microsoft Office is a Mac application only - it's not for the iPad.
You sync apps within iTunes - connect the iPad, click on it in the iTunes device list, go to the Apps tab on the right hand side, and choose what iPad apps you want to sync. You obtain iPad apps from the iTunes Store, or the App Store on the iPad.
Matt

Can you still access Windows partition with open firmware password installed?

Can you still access Windows partition with open firmware password installed? If so, do you still use the Option key upon restart?

I don't use Bootcamp. However, I do know that with a firmware password, pressing the option key at startup will cause the password entry screen to come up; after entering the password, you will get the boot device choice screen.
So, if Bootcamp partitions normally show up on that screen then it should work just fine, or so I'd imagine.

I lost my iphone4 yesterday..i have find my iphone apps in there and its updated to IOS 5. i wonder if they would be able to still access my accounts in there after i remote locked it.? its offline whenever i checked till now..

i lost my iphone4 yesterday..i have find my iphone apps in there and its updated to IOS 5. i wonder if they would be able to still access my accounts in there after i remote locked it.? its offline whenever i checked till now.. im wonderin if ist safe coz all my emails are there and all personal info..i hope someone could answer me..i reported to the police the ist step..coz when it happened ..policemen are there..then i went to the nearest MAC center and tried to track it..but its offline..so they asked me if i want to remote lock it..then i did...which i think the mcreason why i cant track my phone beacause its locked?? or not until they connect to wifi or 3g but its unabling them because i locked it..?

but when i do remote wipe ..it will erase everything in there and i cant track down the phone anyomore?

Entity Framework - Code First - Migration - How to access SQL Server and Oracle using the same context?

Hello,
I use Entity Framework code first approach.
My project is working fine with SQL Server. But, I want to access Oracle too. I want to switch SQL Server and Oracle in run time.
I am able to access Oracle using "Oracle.ManagedDataAccess.EntityFramework.dl" in a new project.
But, Is this possible to access SQL Server and Oracle in the same project.
Thanks,
Murugan

This should be possible with a Code-First workflow. In Code-First the database mapping layer is generated at runtime.
David
David http://blogs.msdn.com/b/dbrowne/

Downloaded Mt Lion Yesterday and my Tool bar has disappeared. I can still access the individual tools but cannot see my header. I used 'help' and did what it suggested. slected 'hide tool bar' and then 'show toolbar'. I also restarted etc.

Downloaded Mt Lion Yesterday and my Tool bar has disappeared. I can still access the individual tools but cannot see my header. I used 'help' and did what it suggested. slected 'hide tool bar' and then 'show toolbar'. I also restarted etc.

Good point BDAqua, the Escape key helps get me back to reality in Lion.
While I've only dabbled around a little in Lion since it's release (I upgraded a 10.6 Clone to Lion on one of my FireWire Drives) now I'm currently downloading Mountain Lion (to upgrade a Clone of that Lion Clone) so that now I can continue to move forward in madness.
P.S. Trust me, I'm not laughing.

I keep getting Alarm popups saying that it cannot send msg using the server null. I think I have disabled email (I use Gmail) and the calendar however I still get these popups and I can't close them?

I keep getting Alarm popups saying that it cannot send msg using the server null.
I think I have disabled email (I use Gmail) and the calendar however I still get these popups and I can't close them?
How can I disable the Alarm popups?
Thanks
Brian

OS X Mail: Troubleshooting sending and receiving email messages - Apple Support
Google Mail recently implemented additional security measures "for your protection" of course. The manifestation of that may be the requirement to create a unique, "application-specific" password for each one of the various Google services you may use. That requirement probably includes Google Mail. So if the above Apple Support document doesn't resolve the problem, research Google's application-specific password requirements, and how to configure Mail to use it.
I asked the Hosts to edit or obscure the email address in your post.

I just went on to an app and I decided to come off a while after so I clicked the button and it kept on coming up with siri so I have to turn off my phone and turn it back on to get to the home ,what's up?

I just went on to an app and I decided to come off a while after so I clicked the button and it kept on coming up with siri so I have to turn off my phone and turn it back on to get to the home ,what's up?

Restart the phone

I have acrobat standard and it will not allow me to edit.. every file i go to open it says "there is a active file open and must close in acrobat" other times it says account cannot be validated after I have already paid for it.. please advise

i have acrobat standard and it will not allow me to edit.. every file i go to open it says "there is a active file open and must close in acrobat" other times it says account cannot be validated after I have already paid for it.. please advise

Hi Timothy,
The account cannot be validated error was due to a glitch on our activation server that has been fixed now.
Please try using acrobat now and check if you are still facing the problem.
Regards,
Rave

Hello All... Back after a brief absence, things look a little bit different. I'm trying to take a 16 minute mini dv video and compress it for use on the web. I'm interested in any suggestions you may have on settings for the video and audio tracks. I'v

Hello All...
Back after a brief absence, things look a little bit different.
I'm trying to take a 16 minute mini dv video and compress it for use on the web. I'm interested in any suggestions you may have on settings for the video and audio tracks. I've tried using Sorenson 3 (15 frames, key frames set to automatic, 320 x 240) for video and IMA 4:1 (mono) for audio. The resulting video looked great but the file size came in at about 255 Mb.
Thanks!
PowerMac G5 1.8 Dual Mac OS X (10.4.3)
Message was edited by: Dan Foley

Thank you for the replies. Everyone was correct about the jack, interface, and phasing problems. I have been unplugging my motu audio interface and then using headphones at work. I have not changed any detailed audio output settings in logic. When I read that the jack might be a problem I tried switching headphones. This actually helped. I am using dre-beats headphones and they seem to be having issues with the mac/jack-(the phasing/panning problems. I can use these headphones with other devices but not the mac. I have to use ipod ear buds and the phasing seems fixed. Hopefully this information is helpful to someone else.
If anyone knows how to correct this issue please let me know its difficult to know what my final mixes are going to sound like and I have had to keep bouncing everything into i-tunes- sync to ipod and then listen in my car radio.

Just bought new PC running Windows 8.1. I have Install discs for Photoshop 4 and an upgrade to Photoshop 7. Unfortunately the Photoshop 4 Install disc won't run as it's incompatible with 64 bit. How do I install Photoshop 7 on my new PC? Is there a place

Just bought new PC running Windows 8.1. I have Install discs for Photoshop 4 and an upgrade to Photoshop 7. Unfortunately the Photoshop 4 Install disc won't run as it's incompatible with 64 bit. How do I install Photoshop 7 on my new PC? Is there a place I can download the Install files from?

Pagemaker is ancient, obsolete and unsupported. It was discontinued over 10 years ago. (Though why it is still sold is a mystery.)
If you want to run PageMaker, your best bet is to use a Win2K or WinXP PC.
Otherwise move to Indesign or look at Serif's PagePlus or Scribus.

My computer wont power up. I have unplugged it for 30 min and replugged but it will still not power up. Can I try something else? cant get an appt until Tuesday.

My computer wont power up. I have unplugged it for 30 min. and replugged and it still will not power up. I cant get an service appt until Tuesday. Is there something else I can do?

Until Tuesday, the only thing you might try, if you already have and didn't state that you did, if this is the same outlet that you have used, and suddenly you lost power, try plugging your computer into another outlet and see if that works. If it works, either try another appliance in the outlet you are having trouble with, or check to see if a breaker has tripped.
If that doesn't work, well...you will just have tro wait until Tuesday.
Wish you the best of luck

How can I get rid of the message that I am using a trial version of Photoshop CC even after becoming a paying member for Photoshop CC and Lightroom ?

After having payed fo an account for one year for Photoshop CC and Lightroom 5 i keep getting the message ,that I am using a trial version of Photoshop CC.
Lightroom on the other hand is not functioning in a trial version !
Could anyone tell me how I can start working with Photoshop CC while not in trial mode ?
Peter

I Don’t know how I di dit, but when I started Photoshop this mornig all of a sudden it worked.
I am happy now and thank you for your efforts.
Regards
Peter Hordijk
Van: Rajshree
Verzonden: woensdag 21 mei 2014 19:04
Aan: Peter Hordijk
Onderwerp: How can I get rid of the message that I am using a trial version of Photoshop CC even after becoming a paying member for Photoshop CC and Lightroom ?
How can I get rid of the message that I am using a trial version of Photoshop CC even after becoming a paying member for Photoshop CC and Lightroom ?
created by Rajshree <https://forums.adobe.com/people/Rajshree> in Adobe Creative Cloud - View the full discussion <https://forums.adobe.com/message/6398343#6398343>

I downloaded Firefox 7 and when I click on the browser icon nothing happens, the browser does not load on desktop.I had no problems with Firefox 4 I had been using for several years and liked very much

I downloaded Firefox 7 and when I click on the browser icon nothing happens, the browser does not load on desktop.I had no problems with Firefox 4 I had been using for several years and liked very much

Most people have no problems with installing firefox as an upgrade, but there are quite a few things that can cause problems. Please have a look at the articles
* [[software Update Failed]] <-- clickable link (blue ) --
* [[firefox will not start]]
* [[firefox does not work]]
Post back after you read them and say what you tried. Have you ensured you used an admin account, possibly needing to check the UAC setting, and that security software is not blocking the changes. You should certainly try starting in firefox's [[safe mode]] either from a menu/icon option or by holding the shift key as you attempt to run firefox.
Is the browser icon you see on the desktop, and a firefox icon ?

HT5622 I'm a student exchange from france in USA, I have an apple ID from france and a bank count in france but i want access to the apple store US because I'm here for the year and some app can be interesting for me (like my gym club app) how can i do ?

I'm a student exchange from france in USA, I have an apple ID from france and a bank count in france but i want access to the apple store US because I'm here for the year and some app can be interesting for me (like my gym club app) how can i do ?

you cant. you need a US bank account.

W2008R2: still access my server with ssl2 after I have disabled ssl2 for client/server and enable ssl3

Similar Messages

Maybe you are looking for