View Single Post
  #1  
Old 12-19-2012, 02:16 PM
foxyfred foxyfred is offline
Member
 
Join Date: Jul 2011
Posts: 11
Default SSL BEAST vulnerability (?) in Litespeed 4.2.1

I'm trying to get our server to prefer the RC4 cipher over others so that we defend against the BEAST vulnerability. Using Qualys' SSL tool, here's what I get when I scan our server:

http://cl.ly/image/2C261x0x3927

RC4 should be at the top of that list. We have changed the SSL listener settings so that only "HIGH" and "MEDIUM" ciphers are used, but still see this issue. Any ideas?
Reply With Quote