SSL Medium Strength Cipher Suites Supported (SWEET32) : port 443

[AldyPs]

Hi Team,

I got result file from itsec team, after they done VA scan via nessus with the description like this :

"The remote host supports the use of SSL ciphers that offer medium strength encryption. Nessus regards medium strength as any encryption that uses key lengths at least 64 bits and less than 112 bits, or else that uses the 3DES encryption suite.

Note that it is considerably easier to circumvent medium strength encryption if the attacker is on the same physical network."

my question is this is relate with configure new SSL or other issue ? can you help me for fixed this issue

[mpc]

Hi, 

Please use on your Windows Server IIS Crypto recommended settings: https://www.nartac.com/Products/IISCrypto

Kind regards

[Dana_Baldwin · Accepted solution]

Hi @AldyPs 

The following is true for Qlik Data Integration products (Replicate, Enterprise Manager, Compose, etc.). I am not sure about Data Analytics products:

We can offer the following guide (https://community.qlik.com/t5/Official-Support-Articles/Disabling-Weak-Cipher-suites-for-TLS-1-2-on-...) on how to disable weak ciphers on a Windows machine, all the management is through the OS level not application level. We cannot advise on specific settings as that is out of our scope.

Hope this helps!

Dana

[AldyPs]

Hi all,

thanks for sharing your experience, my issue has been solved.

Best regards