Remediation Steps

Follow the steps below to remediate this finding on Apache webserver.

1. In the Apache SSL configuration, update SSLProtocol to exclude TLS 1.0:

   SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1

2. Reload Apache:

   sudo systemctl reload apache2