SSL VPN broke by MS patch

skaiser-ab · ‎08-19-2010

SSL VPN is broken by the Microsoft patch KB980436. Anybody know of a work around other than uninstalling the patch?

Todd Pula · ‎08-19-2010

Please refer to the discussion below for more information. You can try to add the following registry values to a machine with the patch installed.

https://supportforums.cisco.com/docs/DOC-12602

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL

add the following 2 DWORD values:

AllowInsecureRenegoServers value: 1

UseScsvForTls value: 1

dougweaver · ‎08-20-2010

Please see the attached document. It has worked well for us in situations where regulation or software such as McAfee HBSS interfere with your ability to uninstall the patch. Since you obviously have no access to our U: drive, you can obtain the proper version of Schannel.dll from a functioning Windows machine.