SSL RC4 Cipher Suites Supported (Bar Mitzvah)

Question

We are having this vulnerability on Windows 2012 server that has Exchange 2016 installed. It is a hybrid server. Is it safe to disable RC4 on exchange servers. I have not been able to get a clear info regarding the process to disable for Exchange servers, Please help.

Answer 1

Enable TLS 1.2 and those ciphers wont be used:
https://docs.digicert.com/certificate-tools/discovery-user-guide/tlsssl-endpoint-vulnerabilities/rc4-cipher-enabled/

You can follow this guidance for Exchange to do that:

https://techcommunity.microsoft.com/t5/exchange-team-blog/exchange-server-tls-guidance-part-1-getting-ready-for-tls-1-2/ba-p/607649

Its three parts so go through each section carefully and test.

Answer 2

@Veronica N

Here is also a blog which suggest disable RC4 ciphers:

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.