POODLE can be exploited to allow an attacker to recover sensitive data sent across the Internet in an encrypted SSL session. In his blog post, Richard Hicks explains that a TMG server that has SSL hardening implemented will offer some protection, but the best practice is to disable SSL 3.0 completely, and he shows you how to do it using PowerShell.
Read Next
