Attached is a technical bulletin describing how to enable strong TLS protocols with the Cb Protection (formerly Bit9) agents.
Note that the 8.x agents now come with protocols SSLv3, TLS 1.0, 1.1 and 1.2 enabled by default.
Related solution:
Basic communication check
Collecting Wireshark Captures for Support Cases
Cb Protection: Requirements for disabling/enabling TLS Protocol 1.1 and/or 1.2 on the Cb Protection ...