diff --git a/spec/acceptance/basic_spec.rb b/spec/acceptance/basic_spec.rb
index 68da1f75..c44bac1a 100644
--- a/spec/acceptance/basic_spec.rb
+++ b/spec/acceptance/basic_spec.rb
@@ -10,4 +10,14 @@
   describe package('foreman-proxy-journald') do
     it { is_expected.not_to be_installed }
   end
+
+  describe command('nmap --script +ssl-enum-ciphers localhost -p 8443') do
+    its(:stdout) { should match(/TLSv1\.3/) }
+    its(:stdout) { should match(/TLSv1\.2/) }
+    its(:stdout) { should_not match(/TLSv1\.1/) }
+    its(:stdout) { should_not match(/TLSv1\.0/) }
+
+    # Test that the least cipher strength is "strong" or "A"
+    its(:stdout) { should match(/least strength: (A|strong)/) }
+  end
 end
diff --git a/spec/setup_acceptance_node.pp b/spec/setup_acceptance_node.pp
index 2b14f650..acbc8c5c 100644
--- a/spec/setup_acceptance_node.pp
+++ b/spec/setup_acceptance_node.pp
@@ -1,3 +1,8 @@
+# Used to test which TLS versions are enabled
+package { 'nmap':
+  ensure => installed,
+}
+
 class { 'foreman::repo':
   repo => 'nightly',
 }