Tagged Questions
3
votes
3answers
2k views
BEAST: IIS6: Failing PCI scan - are these ciphers OK?
Our PCI compliance scanner, TrustWave, have failed our Win 2003/IIS6 site on BEAST because of the following cyphers:
Cipher Suite: SSLv3 : DES-CBC3-SHA
Cipher Suite: SSLv3 : RC4-SHA
Cipher Suite: ...
1
vote
2answers
113 views
Configuring IIS SSL for PCI
Is there a clear, concise list of of SSL settings available for IIS which will pass my PCI audit scanning?
Preferably something for both IIS 6 and IIS 7
I'm currently running into BEAST issues but ...
