Prevent BEAST SSL Attack in IIS 7

• 1 run gpedit.msc
  
• 2 Computer Configuration -> Administrative Templates -> Network -> SSL Configuration Settings
  
• 3 Enable SSL Cipher Suite Order and paste following text into SSL Cipher Suites field (recommended settings)
  
• 4 TLS_RSA_WITH_RC4_128_SHA,TLS_RSA_WITH_RC4_128_MD5,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256_P256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256_P384,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256_P521,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384_P384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384_P521
  
• 5 reboot server
  
• N Edit: There is software to automatically setup all at https://www.nartac.com/Products/IISCrypto/
  Test setup with https://www.ssllabs.com/ssltest/
  

References

• http://www.chriswood.ca/blog/2012/09/preventing-beast-ssl-attacks-in-iis-7/
• https://www.ssllabs.com