Vulnerability Scans & Outdated/Weak Ciphers for SSL/early TLS Versions - Is Disabling The Web Interface and Opting for SSH-only management the solution?

This comment was posted to reddit on Sep 08, 2022 at 1:35 pm and was deleted within 10 hour(s) and 33 minutes.

So all of the devices do support SSH, I just wanted to be sure that if I enable SSH and disable the web interface that I wont still be in the same predicament. Does SSH use weak ciphers as well? Sorry, I am still a bit confused on the underlying technology involved in how SSH is secured, versus SSL/TLS.
To your second point, forward thinking to a time in the future if I ever have strict compliance policies that I need to follow: If I HAD to keep the web interface enabled, is putting the device on a separate VLAN and an ACL limiting access to said web interface enough to move the device itself out of scope even if endpoints plugged into it are in scope (for example, a network switch)?

Thank you so much

/r/networking Thread Parent