Re: checking ssl encryption in firewall

From: Neil Pike (neilpike@compuserve.com)
Date: 05/27/02


Date: Mon, 27 May 2002 19:29:01 +0100
From: Neil Pike <neilpike@compuserve.com>


Andreas,

 It would indeed be a good idea. email sqlwish@microsoft.com and explain why
you need it./
 
> yes i already knew this. i do not want to force all clients to use SSL, but
> i want to make sure that clients coming through the internet to talk to my
> server are using SSL, and i want to enforce it in the firewall by dropping
> all unencrypted connection attempts.
>

 Neil Pike MVP/MCSE. Protech Computing Ltd
 Reply here - no email
 SQL FAQ (484 entries) see
 http://forumsb.compuserve.com/gvforums/UK/default.asp?SRV=MSDevApps
 (faqxxx.zip in lib 7)
 or www.ntfaq.com/Articles/Index.cfm?DepartmentID=800
 or www.sqlserverfaq.com
 or www.mssqlserver.com/faq



Relevant Pages

  • Re: IPSec to encrypt SMB traffic?
    ... How does Etercap decrypt ssl protected data payload without the shared ... >> all of our clients are within our own Domain. ... >> particular Windows 2003 file server. ... Removed all entries under Key Exchange Security Method except ...
    (microsoft.public.windows.server.security)
  • Re: IPSec to encrypt SMB traffic?
    ... How does Etercap decrypt ssl protected data payload without the shared ... >> all of our clients are within our own Domain. ... >> particular Windows 2003 file server. ... Removed all entries under Key Exchange Security Method except ...
    (microsoft.public.windowsxp.security_admin)
  • Re: OWA Basic not possible without SSL?
    ... There is no FBA in Exchange 2000, ... >> server with SSL. ... >> You could issue a Cert from a Windows 2000 RootCA, but then your clients ...
    (microsoft.public.exchange.clients)
  • Re: AD SSL, what impact?
    ... you could just install a self-signed certificate. ... client's trusted roots store if it is using Windows Schannel for SSL ... You'll just have a deployment nightmare getting other clients to trust the ...
    (microsoft.public.windows.server.active_directory)
  • Re: X509 and SSL
    ... When you enable SSL / HTTPS on a particular folder, ... If you need to authenticate your clients via signatures, ... >>> must i buy one certificate for sign response messages and one ...
    (microsoft.public.dotnet.framework.webservices.enhancements)

Quantcast