1

We are a small business and we process credit cards through our desktop pc via the webpage myvirtualmerchant.com

And trustwave keeps scanning our pc and giving us a fail status. Below is the report showing why we fail the scan.

Can anyone tell me what to do to correct this problem.

Also, we use firefox as our web browser. Internet explorer has been uninstalled.

enter image description here

marked as duplicate by gowenfawr, user45139, Neil Smithline, Stephane, WhiteWinterWolf Oct 17 '15 at 11:18

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

1

I can see that most of the findings are related to port 3389 which is for remote desktop. You have some issues related to SSL certificate you use for remote desktop. I will try to mentioned and give some guidance for solving some of them.

  1. TLSv1.0 is supported the port support what seems to an obsolete version of TLS, you need to reconfigure the service to not support this protocol version, I haven't done this myself before but as described here, it seems that there is a patch for this.
  2. SS/TLS weak encryption algorithm, you remote desktop service support weak algorithms, for this one you need to set the encryption level to high from terminal services snap-in type tscc.msc in run please refer to this link if needed and this link as well.

For the rest, you can google the error messages and see which configuration you need to change in the terminal service configuration. I hope this helps a little. I would help with the rest as well if you struggle.

Not the answer you're looking for? Browse other questions tagged or ask your own question.