Nessus Output

The workaround to disable SSL 3.0 for all server software installed on
the remote host has not been applied.

The workaround to disable SSL 3.0 for all client software installed on
the remote host has not been applied.

Fix for standalone Windows systems.

Disable SSL 3.0 in Windows For Server Software

 REG ADD "HKLM\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server" /f /v "Enabled"  /t REG_DWORD /d 0x0

Disable SSL 3.0 in Windows For Client Software

REG ADD "HKLM\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Client" /f /v "Enabled"  /t REG_DWORD /d 0x0

Fix via Group Policy

References

• http://technet.microsoft.com/en-us/security/advisory/3009008
• https://support.microsoft.com/en-us/kb/245030
• http://www.nessus.org/u?0c60701b
• https://www.imperialviolet.org/2014/10/14/poodle.html
• https://www.openssl.org/~bodo/ssl-poodle.pdf
• https://tools.ietf.org/html/draft-ietf-tls-downgrade-scsv-00