I have a legacy product in our inventory that is running on Server 2003, Standard edition. It is due to be refactored to run on a more modern platform, however this will not happen before Q3 of this year.
It is pinging on our security scans due to the outward facing website and vulnerable protocols and ciphers. I used IISCrypto to disable SSL 2.0, 3.0 and the RC4 ciphers. When it failed on the TLS 1.0, I disabled that which promptly broke HTTPS connections to the site.
Is there a way to disable TLS 1.0 and still keep HTTPS connection on Server 2003 Standard?