diff --git a/puppet/services/apache.j2.yaml b/puppet/services/apache.j2.yaml
index 3b2572c2b9..91ab0a04e6 100644
--- a/puppet/services/apache.j2.yaml
+++ b/puppet/services/apache.j2.yaml
@@ -104,6 +104,7 @@ outputs:
             -
               generate_service_certificates: true
               apache::mod::ssl::ssl_ca: {get_param: InternalTLSCAFile}
+              apache::mod::ssl::ssl_protocol: ['all', '-SSLv2', '-SSLv3', '-TLSv1']
               tripleo::certmonger::apache_dirs::certificate_dir: '/etc/pki/tls/certs/httpd'
               tripleo::certmonger::apache_dirs::key_dir: '/etc/pki/tls/private/httpd'
               apache_certificates_specs: