redmad.eu

Error: No connection could be made because the target machine actively refused it 84.19.186.182:2500

Case: You set up a new proxy and / or repository on Veeam Backup & Replication and you receive the following:

error: No connection could be made because the target machine actively refused it 84.19.186.182:2500.

Answer: Allow the following connections on your firewall

Veeam Backup Server –> Veeam Proxy Server / Repository TCP 2500 to 5000.

There was a problem checking for updates 800b0001

If you are getting error code 800b0001 when checking for updates from WSUS (Windows Server Update Services) server in your environment from a Windows 2012 R2 server, try these steps:

On the WSUS server

On the Windows 2012 R2 server run the following commands:

net stop wuauserv
rd /s /q %windir%\softwaredistribution\
net start wuauserv

After the above steps, check again for updates.

wsus - windows update — wsus – windows update

For more information regarding WSUS, visit Windows Server Update Services Home

Secure IIS Web Server & disable weak ciphers

Even if your website is running under HTTPS, you have to also secure SSL/TLS configuration and monitor news about new vulnerabilities and attacks, regarding SSL/TLS ,like:

In order to disable weak ciphers in Windows and secure iis web server, you have to do it through Group Policy Object Editor:
1. run gpedit.msc
2. expand Computer Configuration, Administrative Templates, Network, and then click on SSL Configuration Settings.

3. open the SSL Cipher Suite Order setting and set up a strong cipher suite order.

Or you can do it through the registry, following this article from Microsoft.

If you find it too hard to set a strong cipher suite order and disable vulnerable ciphers, you can use IIS Crypto from NARTAC SOFTWARE.
IIS Crypto is a free tool that gives you the ability to enable or disable protocols, ciphers, hashes and key exchange algorithms on Windows Server 2003, 2008 and 2012 very easy.

After you finish, test your web server with Qualys SSL Labs Server Test. This is a free online service, which performs a deep analysis of the configuration of any SSL web server on the public Internet.