IIS 7 7.5 8 Hardening SSL TLS - Windows Server 2008 R2 2012 R2 DISABLE SSL V2/3 POODLE BEAST. One of the first steps you should do when deploying a new public facing web server is hardening your server's SSL/TLS connections. Disabling vulnerable protocols, ciphers, hashes and key exchange algorithms can help mitigate the now more common exploits like the BEAST attack and now POODLE. By default many weaker technologies are enabled, leaving IIS traffic vulnerable and exposed. In this video I show how to harden IIS via the registry or IISCrypto.
For more info and links, check out my blog post:
Thanks to http://teknoaxe.com for the music!
Tags: IIS 7 7.5 8 Hardening SSL TLS - Windows Server 2008 R2 2012 R2 DISABLE SSL V2/3 POODLE BEAST, Transport Layer Security (Protocol), Windows Server 2008 R2 (Operating System), Internet Information Services, Computer, server, ssl, beast, windows SERVER 2012, iis