I'm in the process of disabling SSLv2 on our IIS-based webserver and am wondering how I can test that SSLv2 is actually disabled?
The website is still in development so not visible outside our organization - which means presumably I can't use any of the public websites that would normally be recommended for this purpose (such as http://www.serversniff.net/content.php?do=ssl) since they wouldn't have access to the site. We're completely a Windows setup so I can't use unix-based tools like openssl. I have tried downloading and running SSLDigger, but the report that produced simply gave certificate details and listed the cyphers supported, without as far as I can see any mention of which SSL versions were supported. So I'm now out of ideas :(