As a temporary workaround, our clients can use a transformer in Content Matrix that temporarily forces (until the application is restarted) the operating system to choose what security protocol to use.
The transformer script only needs to run once:
[System.Net.ServicePointManager]::SecurityProtocol = 0
Change request / defect # 501089.