How do you remove SSL Cipher Suites?

[minerae10]

We recently installed AEM 6.4 on a Windows 2012 R2 server. It was a turnkey/standalone installation. My issue is the NESSUS vulnerability scan reports "The remote service supports the use of anonymous SSL ciphers." and "SSL Medium Strength Cipher Suites Supported.".

How do I remove (or can I remove) anonymous and medium cipher suites?

[smacdonald2008]

Checking internally to see if this case has been reported before.

[smacdonald2008]

I was talking to support about this  - please open a ticket as they want to investigate this use case.