In this Tutorial we are going to check if an Exchange Server is vulnerable to the Drown attack, the same procedure can be used on any server that runs IIS, which means SharePoint, Lync/Skype for Business and etc.
Read more at source: http://www.itprocentral.com/drown-attack-and-exchange-server/