Re #1, by default these boxes are shipping with only a weak des-sha1 ssl cipher turned on. If you add a strong cipher, it should work. Something like:
ssl encryption des-sha1 aes256-sha1
...from the cli.
Re #2, please share your configuration and we can have a look at it.