« Previous Next »

Thread: ftp 7.5 and weak ciphers

Last post 10-02-2009 4:27 PM by daddyt. 3 replies.

Average Rating Rate It (5)

RSS

Page 1 of 1 (4 items)

Sort Posts:

  • 09-29-2009, 4:52 AM

    • daddyt
    • Not Ranked
    • Joined on 09-29-2009, 4:46 AM
    • Posts 2

    ftp 7.5 and weak ciphers

     Hi, I've searched the forums and not found anything (as well as other websites)

    We're using the FTP 7.5 download on a Windows 2008 server and whilst it's all working fine, a recent vulnerability scan has identified that weak ciphers/SSLv2 are enabled.

    The registry changes outlined here: http://support.microsoft.com/kb/245030/ don't do it (and Windows 2008 is not listed anyway)

    Does anyone know what's required to turn these off?

    Thanks

  • 09-30-2009, 4:08 PM In reply to

    Re: ftp 7.5 and weak ciphers

    Hello,

    The registry keys used to disable the weak ciphers on Server 2003 should work on Server 2008 as well.

    Let me know if it doesn't!

    Brock Hensley
    Technical Support Representative
    http://www.ServerIntellect.com

    Managed Servers, 24x7 U.S. Support, Web Hosting Solutions.
  • 10-02-2009, 3:35 AM In reply to

    Re: ftp 7.5 and weak ciphers

    Hi,

    Please check the following article:

    How to disable PCT 1.0, SSL 2.0, SSL 3.0, or TLS 1.0 in Internet Information Services

    http://support.microsoft.com/kb/187498

    Leo Tang
    Microsoft Online Community Support

    Please remember to mark the replies as answers if they help and unmark them if they provide no help.
  • 10-02-2009, 4:27 PM In reply to

    • daddyt
    • Not Ranked
    • Joined on 09-29-2009, 4:46 AM
    • Posts 2

    Re: ftp 7.5 and weak ciphers

     Thanks for the answers guys. I retried the settings and restarted and it was working OK. FWIW, the sslthing utility mentioned here: http://blog.techstacks.com/2009/01/verifying-ssl-ciphers.html shows me which ciphers are still available

     Thanks again

Page 1 of 1 (4 items)
Microsoft Communities