"It is irrelevant whether your system can even support some of the cipher suites in the list, because the Heartbeat request that triggers the vulnerability is sent before any encryption takes place."

http://www.hut3.net/blog/cns---networks-security/2014/04/14/...