When it comes to connectivity, Windows Server 2022 has some
connectivity enhancements, the first one being that it supports
HTTPS and TLS version 1.3 by default.
As you know,
secure connections are imperative for today's interconnected
systems, so making use of TLS version 1.3,
which is the latest version of the internet's most
deployed security protocol, really enhances the secure
communications between two endpoints.
Since this is enabled by default,
you can rest assured that communication between your
server and client would be secured.
One thing that's important to note is that although TLS
1.3 is enabled by default on the server,
you need to ensure that your applications and services that
run on the server support that, and that your clients will
also support that version of TLS.
The DNS client on Windows Server 2022 now also supports DNS‑over‑HTTPS.
This allows you to encrypt DNS queries by using the HTTPS protocol.
This is an important enhancement, because it mitigates any type of
eavesdropping on your DNS data and prevents it from being manipulated.
Server Message Block has been known for various types of vulnerabilities. As
the different versions of Server Message Block were released, multiple
vulnerabilities for those versions were also released.
However,
the security enhancements have increased and we've seen servers adopt
these enhancements. With Windows Server 2022, this is the case, because
now it supports a cipher suite of AES‑256.
This allows Windows Server to automatically negotiate this more advanced
cipher method when connecting to computers that also support that same
cipher method. You can also hard code this through Group Policy, and
we'll see that later in the course.
Another great enhancement which I personally like is
the removal of Internet Explorer.
It's now been replaced with Edge so you can benefit from the different
types of security capabilities that Edge supports,
along with the virtualization‑based security that enhances the protection of Microsoft Edge.