Disable TLS 1.0 and 1.1 In Zimbra Proxy
zmprov mcf -zimbraReverseProxySSLProtocols TLSv1 zmprov mcf -zimbraReverseProxySSLProtocols TLSv1.1 zmprov modifyConfig zimbraReverseProxySSLCiphers '!AES128-SHA256:!AES128-SHA:!CAMELLIA256-SHA:!CAMELLIA128-SHA!AES256-SHA:!AES256-SHA256:!AES256-GCM-SHA384:!AES128-GCM-SHA256:!ADH:!eNULL:!aNULL:!DHE-RSA-AES256-SHA:!SSLv2:!MD5:!EXPORT:!DES:!PSK:!RC4:HIGH' zmproxyctl restart
Now when you run a test at Qualys SSL Labs you should be able to have your Protocol Support score at 100% as part of your A+ overall score.
See also Zimbra SMTP PCI Compliance