title: How to make sure if weak cipher suites (RC4, AES) are really disabled?
body: <p>Aside from using openSSL command line to check that the server does not support the ciphers </p>
  
  <pre><code># openssl s_client -connect SERVERNAME:443 -cipher LOW:EXP
  </code></pre>
  
  <p>source:<a href="https://conetrix.com/Blog/disabling-and-verifying-sslv2-and-weak-ciphers-in-iis" rel="nofollow">https://conetrix.com/Blog/disabling-and-verifying-sslv2-and-weak-ciphers-in-iis</a></p>
  
  <p>I was wondering if there're other ways to really make sure that the ciphers, if disabled, are no longer used by the server? </p>