Ensure App Service Environment has TLS 1.0 and 1.1 disabled

YüksekDüzey 1Manuel incelemeazure

Açıklama

The TLS (Transport Layer Security) protocol secures the transmission of data over the internet using standard encryption technology. TLS versions 1.0 and 1.1 have been deprecated, and their use is generally discouraged. Disable all inbound TLS 1.0 and TLS 1.1 traffic for all the apps in an App Service Environment. TLS 1.0 and 1.1 are outdated and vulnerable to security risks.

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

Audit from Azure Portal 1. Go to App Service Environments. 2. Click the name of an App Service Environment. 3. Under Settings, click Configuration. 4. Ensure that Allow TLS 1.0 and 1.1 is set to Off. 5. Repeat steps 1-4 for each App Service Environment. Audit from Azure CLI Run the following command to list App Service Environments: az appservice ase list For each App Service Environment, ensure that clusterSettings includes: { "name": "DisableTls1.0", "value": "1" } Audit from Azure Policy If referencing a digital copy of this Benchmark, clicking a Policy ID will open a link to the associated Policy definition in Azure. If referencing a printed copy, you can search Policy IDs from this URL: https://portal.azure.com/#view/Microsoft_Azure_Policy/PolicyMenuBlade/~/Definitions - Policy ID: d6545c6b-dd9d-4265-91e6-0b451e2f1c50 - Name: 'App Service Environment should have TLS 1.0 and 1.1 disabled'

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Remediate from Azure Portal 1. Go to App Service Environments. 2. Click the name of an App Service Environment. 3. Under Settings, click Configuration. 4. Next to Allow TLS 1.0 and 1.1, click the radio button next to Off. 5. Click Save. 6. Click Continue. 7. Repeat steps 1-6 for each App Service Environment requiring remediation.

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: azurecloudcomputetls
Referans: CIS Microsoft Azure Compute Services Benchmark v2.0.0 - 2.9 Ensure App Service Environment has TLS 1.0 and 1.1 disabled