Additional security blogs regarding this vulnerability:

http://hackersmag.blogspot.com/2011/09/beast-beating-ssl-tls...

http://www.phonefactor.com/blog/slaying-beast-mitigating-the...

http://www.schneier.com/blog/archives/2011/09/man-in-the-mid...

Some comments: Appears RC4 is not FIPS approved if you need to do government work. Also, not all sites are RC4 compatible.