SAP Server is having weak SSL ciphers, how to solve it?

[Former Member]

Hello SAP Security Professional,

Recently I did a penetration testing on my SAP Sever and I found out that the ports listed at below:

Port 50001 = HTTP over SSL

Port 50003 = IIOP over SSL

Port 50006 = P4 over SSL

are having weak SSL ciphers problem. May I ask is there a way to strengthen the SSL ciphers?

Thank you.

Edited by: Seng Loong Chan on Aug 14, 2008 10:00 AM

[former_member402999]

Hi,

which NW release have you tested? In NW 7.0 you may restrict the list of cipher suites in the administration of the SSL Provider service: [Managing the Credentials and Trusted Certificates to Use SSL|http://help.sap.com/saphelp_nw70/helpdata/EN/14/29236de1864c6e8d46e77192adaa95/frameset.htm].

Best regards,

Klaus

[Former Member]

Thank you for reply.

Yes, I am using NW 7.0. By the way, can I manage the cipher suit by using visual administrator?

Thank you.

[Former Member]

Yes.