I'm having trouble finding a good solution that would be needed for one of the new PCI 4.0 controls:
12.3.3 Cryptographic cipher suites and protocols in use
are documented and reviewed.
What is a good tool to scan for cryptographic ciphers and protocols within an environment? I believe NMAP (Zenmap for Windows) could work but the test scans I've performed do not give accurate results as I can see vulnerability scanning tools pick up other ciphers and protocols that NMAP does not. '
Any help or advice is much appreciated.