Ensure App Service Environment has TLS 1.0 and 1.1 disabled

높음레벨 1수동 검토azure

설명

The TLS (Transport Layer Security) protocol secures the transmission of data over the internet using standard encryption technology. TLS versions 1.0 and 1.1 have been deprecated, and their use is generally discouraged. Disable all inbound TLS 1.0 and TLS 1.1 traffic for all the apps in an App Service Environment. TLS 1.0 and 1.1 are outdated and vulnerable to security risks.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Audit from Azure Portal 1. Go to App Service Environments. 2. Click the name of an App Service Environment. 3. Under Settings, click Configuration. 4. Ensure that Allow TLS 1.0 and 1.1 is set to Off. 5. Repeat steps 1-4 for each App Service Environment. Audit from Azure CLI Run the following command to list App Service Environments: az appservice ase list For each App Service Environment, ensure that clusterSettings includes: { "name": "DisableTls1.0", "value": "1" } Audit from Azure Policy If referencing a digital copy of this Benchmark, clicking a Policy ID will open a link to the associated Policy definition in Azure. If referencing a printed copy, you can search Policy IDs from this URL: https://portal.azure.com/#view/Microsoft_Azure_Policy/PolicyMenuBlade/~/Definitions - Policy ID: d6545c6b-dd9d-4265-91e6-0b451e2f1c50 - Name: 'App Service Environment should have TLS 1.0 and 1.1 disabled'

조치 방법

조치 방식: 가이드 또는 인프라 패치

Remediate from Azure Portal 1. Go to App Service Environments. 2. Click the name of an App Service Environment. 3. Under Settings, click Configuration. 4. Next to Allow TLS 1.0 and 1.1, click the radio button next to Off. 5. Click Save. 6. Click Continue. 7. Repeat steps 1-6 for each App Service Environment requiring remediation.

속성

운영 체제: 모두
태그: azurecloudcomputetls
참고 자료: CIS Microsoft Azure Compute Services Benchmark v2.0.0 - 2.9 Ensure App Service Environment has TLS 1.0 and 1.1 disabled