It you receive this ARO then Field Effect observed one or more hosts on your network authenticating to a service via an insecure/outdated cryptographic cipher.
The alert lists the endpoint(s) Field Effect observed and the insecure cipher each one used.
Exploitable vulnerabilities exist in a range of outdated encryption techniques ranging from hashing functions like MD5 through to key exchange protocols like Diffie-Hellman.
Field Effect helps identify these weaknesses in your environment so you can take action to reduce your threat surface and better protect your data and users.
We recommend disabling support for any identified protocols. The references in the alert will provide detail on a range of the most common risks in this regard. You may need to search for resources or contact support specific to your particular systems, however, most of these issues are well known, and you can usually find helpful documentation online.
Was this article helpful?
That’s Great!
Thank you for your feedback
Sorry! We couldn't be helpful
Thank you for your feedback
Feedback sent
We appreciate your effort and will try to fix the article