Fixing Nessus POODLE Finding through GPO

How to fix the  Nessus POODLE Finding through GPO.

Click Start -> Control Panel -> Administrative Tools -> Group Policy Management

Step 1:

Open Computer Configuration -> Policies -> Administrative Templates -> Windows Components -> Internet Explorer - > Internet Control Panel -> Advanced Page -> Turn off Encryption support -> Enabled

Should be set to:  User TLS 1.0, TLS 1.1, and TLS 1.2

Step 2:

Click Computer Configuration -> Preferences -> Windows Settings -> Registry -> Right Click, New Registry Item.

Reg Item 1:

Action: Update
Hive: HKLM
Key Path: SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Client
Value Name: Enabled
Value Type: REG_DWORD
Value Data: 0

Reg Item 2:

Action: Update
Hive: HKLM
Key Path: SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server
Value Name: Enabled
Value Type: REG_DWORD
Value Data: 0

Internet Explorer https loads Page cannot be displayed on certain pages.

I had an issue where internet explorer wouldn't load certain https sites.  Some worked and some didn't.  I even checked the Local Security Policy for System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing setting.  It was set to disabled.  It was suggested that I check the registry key to see if it was still set.  It was set to 1 and not 0 meaning it was active.  Here is what you can do to fix this.

Type regedit -> Navigate to HKLM\System\CurrentControlSet\Control\Lsa\ -> Locate the setting called FIPSAlgorithmPolicy and see if the value in the () is a 0 or a 1

If it is a (1) double click it and change it to 0.  Click ok and now reboot.  Once back into Windows, if it is still not working reset the zones settings to default and also do a full reset on internet explorer. It is under the advance settings.  You will need to reboot one more time.  At this point IE was back working as it should.

OS: Windows 7

Source:  Link Link