[BlueOnyx:21350] SSL/TLS question

[Michael Aronoff]

I used an online tool to test for TLS 1.2 on a BlueOnyx server today because
I got an email from a credit card processor that it would be required soon.

 

It passed that check but the test
(https://cryptoreport.websecurity.symantec.com/checker/) also said the
server was vulnerable to an attack called BEAST. The note is: Make sure you
have the TLSv1.2 protocol enabled on your server. Disable the RC4, MD5, and
DES algorithms. 

 

Is this accurate on our BlueOnyx configuration and what can I do to mitigate
this attack?

 

Thanks,

______________________________
M Aronoff Out -  <mailto:maronoff at gmail.com> maronoff at gmail.com 

 

I'm a great believer in luck, and I find the harder I work the more I have
of it.
  -  <http://www.quotationspage.com/quote/31912.html> Thomas Jefferson

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.blueonyx.it/pipermail/blueonyx/attachments/20170908/7aae7731/attachment.html>