Hi..

Through Nessus scanner i am finding lost of vulnerability related to SSL/TLS

Vul : SSL/TLS Protocol Initialization Vector Implementation Information Disclosure Vulnerability on w2k3 & 2008 servers as well

I had applied all the mentioned solution from Microsoft of disabling the SSLv2 and TLS 1.but still struggling to fix the same.
Kindly suggest the solutions

Thanks

http://blog.zoller.lu/2011/09/beast-summary-tls-cbc-countermeasures.html

It looks like prioritizing non-CBC ciphers (RC4) is the way to address this.

There's some more Microsoft-centric discussion here: http://social.technet.microsoft.com/Forums/en-US/winserversecurity/thread/6cc4d577-fb22-4765-ad91-0c4ad46474fd

I'm not really familiar with this issue. It's possible that Nessus requires you to disable the ciphers that use AES. If this is a test system, try it out and see what your findings are.

You may need to decide internally if prioritizing RC4 is sufficient, or if eliminating the Nessus finding takes priority.