Hi there.

We would like to disable this two ciphers in TMG 2010.

TLS_RSA_WITH_RC4_128_SHA (0x5)
TLS_RSA_WITH_RC4_128_MD5 (0x4)

We have already tried with adding a key: RCK 128/128 subkey in registry, and then DWORD: DisabledByDefault (1).

But that doesn't disables it.

Hello,

Maybe these articles could help you:

• Mitigating the POODLE SSL 3 Vulnerability on Forefront TMG 2010
• Forefront TMG 2010 SQL Services Fail to Start After Disabling SSL 3.0
• Recommended Forefront TMG 2010 SSL and TLS Configuration

Regards,

Lionel.

Thank you for your reply.

By following this articles: http://www.isaserver.org/articles-tutorials/configuration-security/improving-ssl-security-forefront-threat-management-gateway-tmg-2010-published-web-sites.html

We have already disabled SSL 2.0 and 3.0 on TMG 2010.

But we still get warning regarding ciphers:

TLS_RSA_WITH_RC4_128_SHA (0x5)
TLS_RSA_WITH_RC4_128_MD5 (0x4)

Sorry...
after lookin teh 3rd link again

• Recommended      Forefront TMG 2010 SSL and TLS Configuration

I have managed to solve it.

thanks.