Quantcast
Channel: Symantec Connect - Products - Ideas
Viewing all articles
Browse latest Browse all 1891

SSL Medium Strength Cipher Suites Supported on TCP/443, 8443

$
0
0

Description:
The remote host supports the use of SSL ciphers that offer medium strength encryption. Nessus regards medium strength as any encryption that uses key lengths at least 56 bits and less than 112 bits, or else that uses the 3DES encryption suite.

Note that it is considerably easier to circumvent medium strength encryption if the attacker is on the same physical network.

Here is the list of medium strength SSL ciphers supported by the remote server :

Medium Strength Ciphers (> 64-bit and < 112-bit key)

TLSv1
      EDH-RSA-DES-CBC3-SHA            Kx=DH          Au=RSA      Enc=3DES-CBC(168)        Mac=SHA1  
      ECDHE-RSA-DES-CBC3-SHA       Kx=ECDH     Au=RSA      Enc=3DES-CBC(168)        Mac=SHA1  
      DES-CBC3-SHA                             Kx=RSA        Au=RSA      Enc=3DES-CBC(168)        Mac=SHA1 

The fields above are :

{OpenSSL ciphername}
Kx={key exchange}
Au={authentication}
Enc={symmetric encryption method}
Mac={message authentication code}
{export flag}

These ciphers suites are available in Symantec Messaging Gateway v10.6.2-7 - TCP Port 443, 8443 and the currently SMG is not design to disable them.


Viewing all articles
Browse latest Browse all 1891

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>