Backup Exec Server service shows communication enabled on port 3527 for TLS 1.0/1.1 connections.
Article ID: 100048512
Updated On:
Description
Error Message
Security scanner tools or OpenSSL reports a successful connection on port 3527 for TLS 1.0/1.1.
With Backup Exec 21 onwards all connections are bound to use TLS1.2
Resolution
A hotfix is now available for this issue in the current version(s) of the product(s) mentioned. Refer to the Hotfix link under Related Articles to obtain the hotfix needed to resolve the issue.
Upgrade to Backup Exec 25.1
Apply Backup Exec 25.1 Hotfix 648897
In CASO environments update the CAS server first then update the MBES servers.
Note: Post upgrading to Backup Exec 22.2 if the issue is still observed please confirm TLS fallback is not set in the Backup Exec registry (100043977). Confirm TSL 1.2 is not disabled at the Windows Operating system level.
Issue/Introduction
Backup Exec Server service (beserver.exe) shows communication enabled on port 3527 for TLS 1.0/1.1 connections.
Additional Information
ETrack: 4011752
