Update Cache Server uses old/insecure version of SSL

Security scans of our network are complaining that our Sophos Update Cache server is using SSL v3.0. This is obviously a very old and insecure protocol and I'd like to disable it in favour of TLS1.2 or higher. Is this possible? If so, how?

Added another question
[edited by: pappet at 4:39 AM (GMT -7) on 1 Jun 2022]