VSS KB Articles

How to Configure DNS on a Domain Controller with Two IP Addresses
7/12/2018
How to Configure DNS on a Domain Controller with Two IP Addresses; Configure DNS on a DC with two IP addresses


How to safeguard from the SWEET32
7/12/2018
How to safeguard from the SWEET32 Issue, CVE-2016-2183, Disable RC4 and 3DES on Windows Server


Redirect from HTTP to HTTPS using the IIS URL Rewrite module
2/12/2018
This is the most common requirement on most of the Exchange servers hosted on IIS. The server admins configure an http to https redirect.


Sonicwall disconnects from network every 10-15 minutes on Verizon FIOS
2/11/2018
ISP temporarily disabling port due to receiving excessive ARP requests from SonicWall. Here are the settings to resolve it.


Encrypting Connections to MS SQL Server
2/8/2018
If you want to use encryption with a failover cluster, you must install the server certificate with the fully qualified DNS name of the failover clustered instance on all nodes in the failover cluster. For example, if you have a two-node cluster...


    

7/12/2018
How to safeguard from the SWEET32

How to safeguard from the SWEET32 Issue, CVE-2016-2183

Disable RC4 and 3DES on Windows Server:

RC4

To disable RC4 on your Windows server, set the following registry keys:

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 128/128]
        "Enabled"=dword:00000000

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 40/128]
        "Enabled"=dword:00000000

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 56/128]
        "Enabled"=dword:00000000

3DES

To disable 3DES on your Windows server, set the following registry key:

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\Triple DES 168]
        "Enabled"=dword:00000000


If your Windows version is anterior to Windows Vista (i.e. XP, 2003), you will need to set the following registry key:

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\Triple DES 168/168]
        "Enabled"=dword:00000000