Tell me more ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.
up vote 1 down vote favorite

I have a server keep warning me about event id 36874, source Schannel: An SSL connection request was received from a remote client application, but none of the cipher suites supported by the client application are supported by the server. The SSL connection request has failed. This happens once every day at almost same time.

I used SSLSCAN to check the cipher suite on my server and found that "IDEA-CBC-MD5" failed. I am guessing that there is a client trying to use SSL (IDEA-CBC-MD5) talk to my server, but as my server do support this cipher, it failed.

The thing is, my server(win2003 with .net2.0) is a web server with tons of request. I don't know if there is a way to find out who is sending that request with (IDEA-CBC-MD5) or why it using this cipher?

share|improve this question

1 Answer

up vote 2 down vote accepted

Don't worry about it.

Every browser this side of 1998 supports more secure ciphers, and certainly will match one that your server offers. The failure is extremely unlikely to be a real person with a browser, and is very likely from a connection that's probing your allowed cipher suites in the same way that you discovered that the cipher wasn't supported.

I'd recommend going a bit further, even, and disabling SSLv2. See here for details.

share|improve this answer
+1 -- If you REALLY care about security you should only be allowing high-grade cyphers, and you should disallow protocols like SSLv2 which are known to be broken. If your users can't access your data securely you don't want them accessing it at all. (YMMV depending on whether security or universal acceptance is more important to you) – voretaq7♦ Jan 20 '12 at 23:11

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.