Ensure App Service Environment has TLS 1.0 and 1.1 disabled

ВысокийУровень 1Ручная проверкаazure

Описание

The TLS (Transport Layer Security) protocol secures the transmission of data over the internet using standard encryption technology. TLS versions 1.0 and 1.1 have been deprecated, and their use is generally discouraged. Disable all inbound TLS 1.0 and TLS 1.1 traffic for all the apps in an App Service Environment. TLS 1.0 and 1.1 are outdated and vulnerable to security risks.

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

Audit from Azure Portal 1. Go to App Service Environments. 2. Click the name of an App Service Environment. 3. Under Settings, click Configuration. 4. Ensure that Allow TLS 1.0 and 1.1 is set to Off. 5. Repeat steps 1-4 for each App Service Environment. Audit from Azure CLI Run the following command to list App Service Environments: az appservice ase list For each App Service Environment, ensure that clusterSettings includes: { "name": "DisableTls1.0", "value": "1" } Audit from Azure Policy If referencing a digital copy of this Benchmark, clicking a Policy ID will open a link to the associated Policy definition in Azure. If referencing a printed copy, you can search Policy IDs from this URL: https://portal.azure.com/#view/Microsoft_Azure_Policy/PolicyMenuBlade/~/Definitions - Policy ID: d6545c6b-dd9d-4265-91e6-0b451e2f1c50 - Name: 'App Service Environment should have TLS 1.0 and 1.1 disabled'

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

Remediate from Azure Portal 1. Go to App Service Environments. 2. Click the name of an App Service Environment. 3. Under Settings, click Configuration. 4. Next to Allow TLS 1.0 and 1.1, click the radio button next to Off. 5. Click Save. 6. Click Continue. 7. Repeat steps 1-6 for each App Service Environment requiring remediation.

Свойства

Операционные системы: Любая
Теги: azurecloudcomputetls
Источник: CIS Microsoft Azure Compute Services Benchmark v2.0.0 - 2.9 Ensure App Service Environment has TLS 1.0 and 1.1 disabled