Our SBS 2003 Premium (ISA 2004) recently failed a PCI Compliance scan from Security Metrics (had previously pass in 4/2012) for a Self-Signed Certificate -so we replaced that successfully with a purchased one . We re-ran the scan and now fail with this: (not previously a problem)
Image may be NSFW.
Clik here to view.
The update for the security bulletin MS10-049 was installed on this server in 2010 -we double-checked. We should also note that we used an SSL from Network Solutions. They sent 3 files (an Intermediate, Trusted, and our remote.domainname.com) We only installed the remote.domainname.com using the CEICW wizard. We did not install the other two. We went to:http://www.digicert.com/help/ and tested our SSL and it passed thier installation criteria.
Does anyone have any suggestions on how to correct this?
Thank you!
