- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Oct 13 202209:06 AM - edited Oct 13 202209:12 AM
Description
Weak ciphers need to be disabled because they are susceptible to cracking and reduce the overall security posture of the organization. With this security assessment, Microsoft Defender for Identity detects network activities that are using weak ciphers as a misconfiguration or as a deliberate security downgrade.
Under Exposed Identities it shows Protocol Kerberos and Cipher Rc4HMac.
Attempted resolution:
In AD - set "This account supports Kerberos AES 256 bit encryption". (and turned on 128 bit)
It has been several days and the vulnerability is not clearing for any accounts.
I also applied a GPO to all workstations:
Policy Setting
| Network security: Configure encryption types allowed for Kerberos | Enabled | |||||||||||
|
Any other suggestions?
Labels:
