Hi,
I am trying to remove all SSL cipher suites aside from RC4 in SCHANNEL using the registry keys mentioned in this KB support.microsoft.com/kb/245030/en-us.
After restarting the server, most of the cipher suites are removed aside from RC4 (as needed) and 3DES (TLS_RSA_WITH_3DES_EDE_CBC_SHA).
Any idea why 3DES keeps appearing in SSL scans despite adding this key? It happens both on win2012 and win2008 R2.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\Triple DES 168/168]
"Enabled"=dword:00000000
Thanks,
Oren