Ensure App Service Environment has TLS 1.0 and 1.1 disabled

AltaNível 1Revisão manualazure

Descrição

The TLS (Transport Layer Security) protocol secures the transmission of data over the internet using standard encryption technology. TLS versions 1.0 and 1.1 have been deprecated, and their use is generally discouraged. Disable all inbound TLS 1.0 and TLS 1.1 traffic for all the apps in an App Service Environment. TLS 1.0 and 1.1 are outdated and vulnerable to security risks.

Como é verificado

Método de auditoria: Revisão manual

Esta recomendação não pode ser verificada automaticamente. Uma varredura a lista com estas instruções quando você passa --include-manual.

Audit from Azure Portal 1. Go to App Service Environments. 2. Click the name of an App Service Environment. 3. Under Settings, click Configuration. 4. Ensure that Allow TLS 1.0 and 1.1 is set to Off. 5. Repeat steps 1-4 for each App Service Environment. Audit from Azure CLI Run the following command to list App Service Environments: az appservice ase list For each App Service Environment, ensure that clusterSettings includes: { "name": "DisableTls1.0", "value": "1" } Audit from Azure Policy If referencing a digital copy of this Benchmark, clicking a Policy ID will open a link to the associated Policy definition in Azure. If referencing a printed copy, you can search Policy IDs from this URL: https://portal.azure.com/#view/Microsoft_Azure_Policy/PolicyMenuBlade/~/Definitions - Policy ID: d6545c6b-dd9d-4265-91e6-0b451e2f1c50 - Name: 'App Service Environment should have TLS 1.0 and 1.1 disabled'

Como é corrigido

Método de correção: Orientação ou patch de infraestrutura

Remediate from Azure Portal 1. Go to App Service Environments. 2. Click the name of an App Service Environment. 3. Under Settings, click Configuration. 4. Next to Allow TLS 1.0 and 1.1, click the radio button next to Off. 5. Click Save. 6. Click Continue. 7. Repeat steps 1-6 for each App Service Environment requiring remediation.

Propriedades

Sistemas operacionais: Qualquer
Tags: azurecloudcomputetls
Referência: CIS Microsoft Azure Compute Services Benchmark v2.0.0 - 2.9 Ensure App Service Environment has TLS 1.0 and 1.1 disabled