Skip to content

Latest commit

 

History

History
25 lines (21 loc) · 1.96 KB

tls-version-check.md

File metadata and controls

25 lines (21 loc) · 1.96 KB

CloudSploit

AZURE / App Service / TLS Version Check

Quick Info

Plugin Title TLS Version Check
Cloud AZURE
Category App Service
Description Ensures that all web apps are using the latest version of TLS
More Info App Services currently allows web apps to use TLS versions 1.0, 1.1 and 1.2. It is highly recommended to use the latest TLS 1.2 version for web app TLS connections.
AZURE Link https://azure.microsoft.com/en-in/updates/app-service-and-functions-hosted-apps-can-now-update-tls-versions/
Recommended Action Set the minimum TLS version to 1.2 for all App Services.

Detailed Remediation Steps

  1. Log in to the Microsoft Azure Management Console.
  2. Find the search bar at the top and search for App Services.
  3. Select the "App Service" by clicking on "Name" to go to its configuration.
  4. Scroll down the selected "App Services" left navigation panel and under "Settings" click on the "TLS/SSL settings" option.
  5. On the "TLS/SSL settings" page select the Bindings tab, scroll down and under the "Protocol Settings" check the "Minimum TLS Version". It’s recommended to use only latest version (1.2) of TLS.
  6. If the "App Service" is not using the latest version of the TLS then select 1.2 from the slider.
  7. Wait for the confirmation box to save changes.
  8. Repeat steps number 3 - 7 to verify all other "Apps" are using latest TLS version in the account.