how to Disable sslv3 on SA server
3 years ago
Originally Published: 2016-03-22
Article Number
000058724
Applies To
RSA Product Set: Security Analytics
RSA Product/Service Type: SA Security Analytics Server
RSA Version: 10.4.+
 
Issue
Due to Poodle vulnerabilty, You may still need to disable SSL v3 on SA servers, even though they have already been remediated from version 10.4 onwards.
Resolution
1- ssh to SA 

2- cd /etc/puppet/modules/saserver/files 

3- vi jetty-ssl.xml 

4- look for the line "<Item>TLSv1</Item>" 

5- insert the line "<Item>SSLv3</Item>" 

6- save the file 

7- run "puppet agent -t" on SA