It you receive this ARO then Field Effect observed one or more hosts on your network authenticating to a service via an insecure/outdated cryptographic cipher.
The alert will list which endpoint(s) were observed and the insecure Cipher it used.
Exploitable vulnerabilities exist in a range of outdated encryption techniques ranging from hashing functions like MD5 through to key exchange protocols like Diffie-Hellman.
Field Effect helps identify these weaknesses in your environment so you can take action to reduce your threat surface and better protect your data and users.
We recommend disabling support for any identified protocols. The references in the alert will provide detail on a range of the most common risks in this regard. You may need to search for resources or contact support specific to your particular systems, however most of these issues are relatively well known and helpful documentation can usually be found online.
Was this article helpful?
That’s Great!
Thank you for your feedback
Sorry! We couldn't be helpful
Thank you for your feedback
Feedback sent
We appreciate your effort and will try to fix the article