Okay, so here is a weird question. We have our Orion NPM 12.1 monitoring a couple external websites, polling every minute. The polls work fine for 19 polls, and then the 20th poll (every 20 minutes) the poll fails and reports the website down. The website, is of course not down. We wiresharked the polls, and it seems that the 20th poll is being done using TLS v1.0, where as the other polls use TLS v1.2 -- the v1.2 polls succeed, and the v1.0 polls fails (with good reason since we have disabled TLS 1.0 on the web servers).
Now, I'm not asking about disabling TLS 1.0 using NPM 12.1 since I already read the threads which say it can't be done (read the threads for more info if you are interested in this).
What I am asking about is why would 19 out of 20 polls use TLS v1.2, and then the 20th one use v1.0? This seems very strange to me. Any suggestions? Well-- besides upgrading -- which is in process, but System Architect Murphy has been using his Law to prevent the upgrade.