RA VPN Security Scan finds vulnerabilities

G_W_Albrecht — Wed, 15 Jun 2022 14:19:10 GMT

SMB 14xx with VPN Remote Access enabled had a Security Scan performed that found the following vulnerabilities:

"'Vulnerable' cipher suites accepted by this service via the TLSv1.2 protocol:

TLS_RSA_WITH_3DES_EDE_CBC_SHA (SWEET32)"

"'Weak' cipher suites accepted by this service via the TLSv1.2 protocol:

TLS_RSA_WITH_RC4_128_MD5

TLS_RSA_WITH_RC4_128_SHA"

According to sk162794, ciphers and MACs can not be restricted on SMBs, but sk104095 helped a lot !

Re: RA VPN Security Scan finds vulnerabilities

G_W_Albrecht — Wed, 15 Jun 2022 14:21:21 GMT

sk104095 tells about Advanced settings:

So if we set both RC4 and 3DES to false, Security Scan is much happier:

Much better now 8)