Title

IE is not capable to use 128-bit encryption. (Cat II impact)

Discussion

IE must be enabled to use 128 bit encryption. This will lead to stronger encryption when supported by the web server for SSL connections.

Check Content

Procedure: From IE go to the Help | About Internet Explorer dialog. The capability for 128 bit encryption is indicated by the phrase “Cipher Strength: 128 bit.” Criteria: If the phrase “Cipher Strength: 128 bit” is displayed, this is not a finding.

Fix Text

Install a 128 bit version of IE.

Additional Identifiers

Rule ID: SV-6387r1_rule

Vulnerability ID: V-6317

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.