How to disable SSLv3 in BCAAA or in Windows server

book

Article ID: 168215

calendar_today

Updated On:

Products

ProxySG Software - SGOS

Issue/Introduction

As explained in SA83, when using IWA-BCAAA or WinSSO, BCAAA uses the settings provided by Windows for SSL/TLS connections.
BCAAA does not have an option to select the SSL version. Therefore, to disable SSLv3, you will need to disable SSLv3 on the Windows server for the Server Software.

Resolution

Workaround

To disable SSLv3 on the Windows server where the BCAAA agent is installed, read Microsoft Security Advisory 3009008. Follow the steps in "Disable SSL 3.0 in Windows For Server Software"