 Re: SSLv2 Vulnerability
Did you actually try and use SSLv1/2 or just a scanner? I know that several products start with an SSLv1 connection and then require TLS to actually complete the process. I forget the reason, but it has to do with some buggy browser implementations.
So something like Nessus will report the SNX uses SSLv1 but in reality it doesn't. |