Insecure cipher suites

[Joseph TK Liu]

Hi all,


Recently, we reviewed the security of our network and was noted that the network (mainly Windows 2012 servers) is using the following cipher suites.

- RC4-MD5
- RC4-SHA
- EXP-RC4-MD5
- DES-CBC3-SHA
- EXP-DES-CBC-SHA
- EXP-RC2-CBC-MD5
- DES-CBC-SHA
- EDH-RSA-DES-CBC-SHA
- EDH-RSA-DES-CBC3-SHA
- DES-CBC3-MD5
- TLS1-CK-DHE

How can I disable them? If I disable them, will there be any impact to the existing network?


Thanks and regards,


Joseph Liu


Joseph Liu

Continue reading...