Backup Exec Server service shows communication enabled on port 3527 for TLS 1.0/1.1 connections.

Problem

Backup Exec Server service (beserver,exe) shows communication enabled on port 3527 for TLS 1.0/1.1 connections.
 

Error Message

Security scanner tools or OpenSSL reports a successful connection on port 3527 for TLS 1.0/1.1.
With Backup Exec 21 onwards all connections are bound to use TLS1.2 
 

Solution

A hotfix is now available for this issue in the current version(s) of the product(s) mentioned. Refer to the Hotfix link under Related Articles to obtain the hotfix needed to resolve the issue.

Backup Exec 21 Update 2 - Backup Exec 21.2

Note: Post upgrading to Backup Exec 22.2 if the issue is still observed please confirm TLS fallback is not set in the Backup Exec registry (100043977). Confirm TSL 1.2 is not disabled at the Windows Operating system level.