Email Protection Fails PCI Scan due to TLS v below 1.1

Question

Email Protection on Port 465 is failing out PCI ASV scan because of it using below TLS V1.1 
 How can this be corrected?

BAlfson · Answer

Yeah, Jay, those are automatic reports, not even read through by a person first at most services. Tell them their tool was talking to your SMTP Proxy, not a web server. Depending on the PCI service, that should satisfy them. If you need a statement from Sophos, contact your reseller. 
 Cheers - Bob