SOLVED

3des / TLS Deprecation recommendations table

%3CLINGO-SUB%20id%3D%22lingo-sub-313595%22%20slang%3D%22en-US%22%3E3des%20%2F%20TLS%20Deprecation%20recommendations%20table%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-313595%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20all%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI'm%20looking%20across%20all%20my%20customers'%20tenant%20at%20the%20deprecation%20report%20and%20seeing%20various%20values%20in%20the%20%22Agent%22%20column%2C%20including%20some%20ones%20that%20surprise%20me.%20Does%20anyone%20know%20if%20Microsoft%2C%20or%20a%20third-party%2C%20has%20provided%20a%20table%20of%20what%20actions%20are%20needed%20for%20the%20the%20various%20'Agents'.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ee.g.%20I%20see%3A%3C%2FP%3E%3CTABLE%3E%3CTBODY%3E%3CTR%3E%3CTD%3Esecretary%40example.com%3C%2FTD%3E%3CTD%3ETLS1.0%2F1.1%3C%2FTD%3E%3CTD%3EMicrosoft%2BOffice%2F16.0%2B(Windows%2BNT%2B6.3%3B%2BMicrosoft%2BOutlook%2B16.0.11029%3B%2BPro)%3C%2FTD%3E%3CTD%3E2%3C%2FTD%3E%3CTD%3E%26nbsp%3B%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3Escott%40example.com%3C%2FTD%3E%3CTD%3ETLS1.0%2F1.1%3C%2FTD%3E%3CTD%3EMicrosoft%2BBITS%2F7.5%3C%2FTD%3E%3CTD%3E13%3C%2FTD%3E%3CTD%3E%26nbsp%3B%3C%2FTD%3E%3C%2FTR%3E%3C%2FTBODY%3E%3C%2FTABLE%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%20I%20had%20the%20latter%20%3CA%20href%3D%22https%3A%2F%2Ftwitter.com%2Fdmstork%2Fstatus%2F1082652412786208773%22%20target%3D%22_self%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Eexplained%20%3C%2FA%3Eto%20me.%20BITS%20it%20used%20by%20Outlook%20for%20OAB%20download%2C%20so%20that's%26nbsp%3Blikely%20Windows%207.%20So%20need%20to%20do%20the%20kb3140245%20actions%20I%20guess.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20former%20is%20more%20confusing%20to%20me.%20That's%26nbsp%3BWindows%208.1%20with%20Office%20C2R.%20That%20platform%20should%20be%20all%20compliant%2C%20no%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAlan%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-313799%22%20slang%3D%22en-US%22%3ERe%3A%203des%20%2F%20TLS%20Deprecation%20recommendations%20table%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-313799%22%20slang%3D%22en-US%22%3E%3CP%3EThe%20platform%20having%20all%20the%20necessary%20controls%20to%20disable%20TLS%201.0%2F1.1%20doesn't%20necessarily%20mean%20that%20they%20are%20actually%20disabled%2C%20so%20check%20for%20the%20relevant%20reg%20keys.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAs%20for%20the%20%22Agent%22%20column%2C%20it%20can%20be%20anything%20really%2C%20it's%20fairly%20easy%20to%20put%20a%20custom%20string%20there.%20Generally%20speaking%2C%20you%20can%20use%20one%20of%20the%20many%20%22user%20agent%20list%22%20sites%20as%20a%20reference.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Contributor

Hi all

 

I'm looking across all my customers' tenant at the deprecation report and seeing various values in the "Agent" column, including some ones that surprise me. Does anyone know if Microsoft, or a third-party, has provided a table of what actions are needed for the the various 'Agents'.

 

e.g. I see:

secretary@example.comTLS1.0/1.1Microsoft+Office/16.0+(Windows+NT+6.3;+Microsoft+Outlook+16.0.11029;+Pro)2 
scott@example.comTLS1.0/1.1Microsoft+BITS/7.513 

 

So I had the latter explained to me. BITS it used by Outlook for OAB download, so that's likely Windows 7. So need to do the kb3140245 actions I guess.

 

The former is more confusing to me. That's Windows 8.1 with Office C2R. That platform should be all compliant, no?

 

Alan

1 Reply
Best Response confirmed by Deleted
Solution

The platform having all the necessary controls to disable TLS 1.0/1.1 doesn't necessarily mean that they are actually disabled, so check for the relevant reg keys.

 

As for the "Agent" column, it can be anything really, it's fairly easy to put a custom string there. Generally speaking, you can use one of the many "user agent list" sites as a reference.