Does the web scanner check for SSL requirements?

The web scanner has the ability to check web services to determine if SSL is required and if weak SSL ciphers are enabled. If a web service does not require SSL or if it uses a weak SSL cipher, the web scanner reports a web vulnerability for the service.

The options for SSL checks are located under the Transport Layer Security section of the web scan configuration page. You'll need to expand the Advanced Options to see them.

You can enable checks for when SSL is not enabled and when weak SSL ciphers are allowed.