This repository has been archived by the owner on May 24, 2023. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 11
sec01
My-Random-Thoughts edited this page Oct 28, 2017
·
1 revision
Ensure security ciphers are set correctly. Settings taken from https://www.nartac.com/Products/IISCrypto/Default.aspx using "Best Practices/FIPS 140-2" settings.
- DisabledCiphers - "LIST" - Ciphers that should be disabled
- EnabledCiphers - "LIST" - Ciphers that should be enabled
DisabledCiphers = ('DES 56/56', 'NULL', 'RC2 128/128', 'RC2 40/128', 'RC2 56/128', 'RC2 56/56', 'RC4 128/128', 'RC4 40/128', 'RC4 56/128', 'RC4 64/128')
EnabledCiphers = ('AES 128/128', 'AES 256/256', 'Triple DES 168/168')
- None
-
PASS
All ciphers set correctly -
WARNING
-
FAIL
One or more ciphers set incorrectly -
MANUAL
-
NA
- All Servers
- None