• Introducing WebPros Cloud - a fully managed infrastructure platform purpose-built to simplify the deployment of WebPros products !  WebPros Cloud enables you to easily deliver WebPros solutions — without the complexity of managing the infrastructure.
    Join the pilot program today!
  • Support for BIND DNS has been removed from Plesk for Windows due to security and maintenance risks.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS.

Issue how can i fix those problems

elaa

Basic Pleskian
one of the clients has run a security scan for the site web that I am working on, so he found some issues that I need to fix
these issues are :
FTP Unencrypted Cleartext Login
// solution: Enable FTPS or enforce the connection via the 'AUTH TLS'

SMTP Unencrypted Cleartext Login
//solution: Enable SMTPS or enforce the connection via the 'STARTTLS' command

POP3 Unencrypted Cleartext Login
//solution:
Configure the remote server to always enforce encrypted connections via SSL/TLS with the 'STLS' command

SSL/TLS: Diffie-Hellman Key Exchange Insufficient DH Group Strength Vulnerability...
//solution:
Deploy (Ephemeral) Elliptic-Curve Diffie-Hellman (ECDHE) or use a 2048-bit or stronger Diffie-Hellman group

I have been searching how to apply these solutions so long but I could not find a way if anyone knows how I would be grateful
I am using Plesk onyx, Nginx with a user account
 
Back
Top