logo
Welcome Guest! To enable all features please Login or Register.

Notification

Icon
Error

Options
Go to last post Go to first unread
dit  
#1 Posted : Tuesday, April 3, 2018 9:20:06 PM(UTC)
dit


Rank: Newbie

Joined: 4/13/2015(UTC)
Posts: 10
Canada

I have our on-premise ScreenConnect installation running on a Windows 7 system with a Let's Encrypt cert.

Everything is working just fine, however when I run a report on the SSL, I get a poor grade from ssllabs.com/ssltest: https://img42.com/UFSRf+

What is determining this grade? The Windows 7 box, or the ScreenConnect application itself?

Edited by user Thursday, April 5, 2018 2:00:11 PM(UTC)  | Reason: Not specified

georg.leitner  
#2 Posted : Wednesday, April 4, 2018 12:13:51 PM(UTC)
georg.leitner


Rank: Member

Medals: Level 1: Random Act of Kindness! Received One Thanks!

Joined: 2/3/2015(UTC)
Posts: 32
Austria

Thanks: 1 times
Was thanked: 5 time(s) in 5 post(s)
hi dit,

the report shows exactly, what has to be done by you to get a better grade. e.g. disable SSL2/SSL3,....

if you change everthing which is listet, you would get an a, if you only disable SSLv2 and SSLv3, you will get a D.


Georg
dit  
#3 Posted : Thursday, April 5, 2018 1:59:06 PM(UTC)
dit


Rank: Newbie

Joined: 4/13/2015(UTC)
Posts: 10
Canada

Originally Posted by: georg.leitner Go to Quoted Post
hi dit,

the report shows exactly, what has to be done by you to get a better grade.

Georg


Thanks for the reply, Georg but I am aware of that. My question was: What is determining this grade? The Windows 7 box, or the ScreenConnect application itself? In other words, is is a change I have to make on the OS, or the ScreenConnect config.

I found the answer: the OS. This tool made it dead simple: https://www.nartac.com/Products/IISCrypto/
georg.leitner  
#4 Posted : Friday, April 6, 2018 7:38:31 AM(UTC)
georg.leitner


Rank: Member

Medals: Level 1: Random Act of Kindness! Received One Thanks!

Joined: 2/3/2015(UTC)
Posts: 32
Austria

Thanks: 1 times
Was thanked: 5 time(s) in 5 post(s)
don't know if windows 7 supports the latest developments in this area, i would suggest to switch also to a newer windows version or a reverse proxy if you cannot get the grade you want. Also i do not know if ScreenConnect/Windows 7 supports HSTS, Certificate Stapling,.....
Users browsing this topic
Forum Jump  
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.