App Control: Can the RC4 Cipher be Disabled on the App Control Server?

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Can the RC4 Cipher be disabled on the application server hosting App Control Server? 

Environment

• App Control Server: All Supported Versions
• Microsoft Windows Server: All Supported Versions 

Resolution

There have been no known issues caused by disabling RC4 cipher on the application server.

Additional Information

• During install of App Control Server a default site configuration for IIS is created.
• App Control uses the highest available TLS version enabled.
• App Control does not require any specific ciphers for communication, as long as both the Server and Agent use the OS to determine which ciphers are available.