SSL VPN broke by MS patch

[skaiser-ab]

SSL VPN is broken by the Microsoft patch KB980436.  Anybody know of a work around other than uninstalling the patch?

[Todd Pula]

Please refer to the discussion below for more information.  You can try to add the following registry values to a machine with the patch installed.

https://supportforums.cisco.com/docs/DOC-12602

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurityProviders\SCHAN​N​EL

add the following 2 DWORD values:

AllowInsecureRenegoServers   value:  1

UseScsvForTls   value:  1

[dougweaver]

Please see the attached document.  It has worked well for us in situations where regulation or software such as McAfee HBSS interfere with your ability to uninstall the patch.  Since you obviously have no access to our U: drive, you can obtain the proper version of Schannel.dll from a functioning Windows machine.