Java Deserialization Remote Code Execution ob BOXI3.1SP7

I have this requirement to disable the Java Deserialization Remote code execution on one of our Tomcat Web App servers.

Can you please guide me how to execute/disable this on the Tomcat Web App server and then have to test Business objects Webi reports etc to make sure if this has any impact.

Thanks,

Shravan