Add the following to AmbienceServer\jetty\etc\Jetty-ssl-context.xml in Ambience 4.x to exclude user defined protocols:
<Set name="ExcludeProtocols">
<Array type="java.lang.String">
<Item>TLS1</Item>
<Item>SSLv3</Item>
<Item>SSLv2Hello</Item>
<Item>TLS1.1</Item>
</Array>
</Set>