Fixed a problem with RC4 cipher suites detected in IBM Security AppScan scans
Recently, when scanning a website with IBM Security AppScan Standard, the following problems occurred in the generated report (detection of RC4 cipher suites and browsers for SSL/TLS using alias BEAST)
Operating system: Oracle Linux 6.1
Middleware: Apache-Tomcat-7.0.67
The screenshot of the question is as follows:
RC4 cipher suite detected
Browser usage for SSL/TLS (aka BEAST)
To solve the above two problems, you can do the following configuration in the tomcat configuration file
After configuration, restart tomcat to detect and generate a report again to see that the corresponding problem has been resolved.
