+1
We just went through a security audit and this helped clean up a lot of things
very quickly. We could have done them other ways, but this was quick and easy.
--
There are 10 kinds of people in the world...
those who understand binary and those who don't.
From: [email protected] [mailto:[email protected]] On
Behalf Of Tim Williams
Sent: Friday, January 13, 2017 12:14 PM
To: [email protected]
Subject: [NTSysADM] RE: Disable TLS 1.0 on ADFS 3.0
I would suggest using the nartac iis crypto software to manage the protocols.
I love this tool
https://www.nartac.com/Products/IISCrypto
From: [email protected]<mailto:[email protected]>
[mailto:[email protected]] On Behalf Of Christopher Bodnar
Sent: Friday, January 13, 2017 11:37 AM
To: [email protected]<mailto:[email protected]>
Subject: [NTSysADM] Disable TLS 1.0 on ADFS 3.0
Can anyone point me to some documentation that discusses this? I’ve tested our
ADFS site with the online Qualys tool:
https://www.ssllabs.com/ssltest/index.html
And it comes back stating that TLS 1.0 is enabled:
[cid:[email protected]]
With ADFS 3.0 using HTTP.sys instead of IIS, I’m not sure where that is
configured. Can’t find any references to this.
Thank you,
Christopher Bodnar
Enterprise Architect II, Corporate Office of Technology:Enterprise Architecture
and Engineering Services
Tel 610-807-6459
3900 Burgess Place, Bethlehem, PA 18017
[email protected]<mailto:>
[cid:[email protected]]
The Guardian Life Insurance Company of America
www.guardianlife.com<http://www.guardianlife.com/>
________________________________
----------------------------------------- This message, and any attachments to
it, may contain information that is privileged, confidential, and exempt from
disclosure under applicable law. If the reader of this message is not the
intended recipient, you are notified that any use, dissemination, distribution,
copying, or communication of this message is strictly prohibited. If you have
received this message in error, please notify the sender immediately by return
e-mail and delete the message and any attachments. Thank you.