A secure website is hosted on EC2 instances behind an ALB using an AWS Certificate Manager (ACM) certificate. Users with older browsers cannot access the site properly. What is the most operationally efficient way for the SysOps administrator to resolve compatibility problems for legacy browsers?

Updating the ALB's SSL negotiation policy is the most operationally efficient solution because it directly addresses the compatibility issue at the load balancer level without requiring infrastructure changes or new certificates. Legacy browsers often lack support for modern ciphers and TLS versions. By selecting a security policy that includes older, but still secure enough, ciphers and protocols, the ALB can successfully establish connections with these browsers. Requesting a new ACM certificate is unnecessary as ACM certificates are generally compatible; the issue is with the negotiation policy. Deploying a second ALB adds complexity and cost for a problem that can be solved by configuration. Installing custom SSL certificates on every EC2 instance bypasses the ALB's SSL offloading capabilities, increasing operational overhead and management complexity.