- Disable SSLv3 against POODLE - Disable RC4 as a weak cipher - Set the CommonName to the system host name