> Source: [sk180720](https://support.checkpoint.com/results/sk/sk180720)

# sk180720 - Threat Hunting connection to Harmony Servers when working on Windows Server 2012 R2 fails

| Property | Value |
|----------|-------|
| Solution ID | sk180720 |
| Date Created | 2023-03-13 |
| Last Modified | 2023-03-15 |
| Technical Level | Advanced |
| Products | Endpoint Security |
| Versions | Cloud, E89.X, E88.X |
| OS | Windows |

## Symptoms

- * On Windows Server 2012 R2, the connection of Threat Hunting to Harmony Servers fails due to SSL errors, and no data is presented on the portal.
* The NGAV.log shows:  
  `\[Error] source: (NGAV.EDR.Http.Cloud.CloudAuthentication) message: ( Http error --> (HttpRequestException) --> An error occurred while sending the request. | Inner Exception: The request was aborted: Could not create SSL/TLS secure channel.`

## Cause

TLS 1.2 cipher suites are **not** supported on Windows Server 2012 R2. Windows Server 2012 R2 supports these Ciphers:   
`TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256`   
`TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384`  

To read more about it: [click here](https://learn.microsoft.com/en-us/windows/win32/secauthn/tls-cipher-suites-in-windows-8-1).  

While the Endpoint client is trying to access using these ciphers:   
`TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256`  
`TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384`

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content