Finding: Server Supports Weak Transport Layer Security (SSL/TLS)

This blog post explains the common security finding "Server Supports Weak Transport Layer Security (SSL/TLS)", outlines the risks associated with weak protocols and ciphers (e.g., session hijacking, impersonation, and historical vulnerabilities like Heartbleed, DROWN, POODLE), and provides remediation guidance including disabling protocols older than TLS 1.2, applying Group Policy or automation for configuration, considering segmentation for legacy/embedded devices, and referencing deployment best-practice resources and vendor documentation.