AnsweredAssumed Answered

SSL test fail after mitigating BEAST attack

Question asked by Emilio Casbas on Nov 21, 2011
Latest reply on Nov 22, 2011 by Emilio Casbas

Hello,

 

Thank you for the great tool, I've been using it to mitigate the configuration of my SSL services.

 

Today when I have disabled the Beast attack in a domain (IIS7) with the instructions from:

http://www.phonefactor.com/resources/CipherSuiteMitigationForBeast.pdf

 

The following SSL tests with this domain are failing with:

Assessment failed: Connection reset

 

but the connection and service is OK.

 

Any hint?

 

Regards

Emilio

Outcomes