Resolved Passing PCI scan - weak arcfour ciphers

[VinnyT]

Hi. It seems one of my sites keeps failing PCI due to "weak arcfour ciphers" being available. This is identified using this command: nmap -Pn --script ssh2-enum-algos www.domain.com -p 22

I have tried the pci compliance resolver many times. Any idea how i can fix this problem?
I am running the latest version of plesk.

Thanks

 

[UFHH01]

Hi VinnyT,

are you aware, that YOU are able to define own ciphers lists ( for example recommended ones from mozilla.org - "intermediate" is the best recommendation from my point of view! - at => Security/Server Side TLS - MozillaWiki ) for each service? Plesk offers a detailed documentation, how to do that at:

=> Tune Plesk to Meet PCI DSS on Linux​

 

[mr-wolf]

You are testing your SSH-server with that nmap command (-p 22)...
Is that deliberate?
I think you want to test your https-server or not?