Microsoft Azure
TMA-AZURE-COMPUTE-2.9
Ensure App Service Environment has TLS 1.0 and 1.1 disabled
Mô tả
The TLS (Transport Layer Security) protocol secures the transmission of data over the internet using standard encryption technology. TLS versions 1.0 and 1.1 have been deprecated, and their use is generally discouraged. Disable all inbound TLS 1.0 and TLS 1.1 traffic for all the apps in an App Service Environment. TLS 1.0 and 1.1 are outdated and vulnerable to security risks.
Cách kiểm tra
Phương pháp kiểm tra: Xem xét thủ công
Audit from Azure Portal 1. Go to App Service Environments. 2. Click the name of an App Service Environment. 3. Under Settings, click Configuration. 4. Ensure that Allow TLS 1.0 and 1.1 is set to Off. 5. Repeat steps 1-4 for each App Service Environment. Audit from Azure CLI Run the following command to list App Service Environments: az appservice ase list For each App Service Environment, ensure that clusterSettings includes: { "name": "DisableTls1.0", "value": "1" } Audit from Azure Policy If referencing a digital copy of this Benchmark, clicking a Policy ID will open a link to the associated Policy definition in Azure. If referencing a printed copy, you can search Policy IDs from this URL: https://portal.azure.com/#view/Microsoft_Azure_Policy/PolicyMenuBlade/~/Definitions - Policy ID: d6545c6b-dd9d-4265-91e6-0b451e2f1c50 - Name: 'App Service Environment should have TLS 1.0 and 1.1 disabled'
Cách khắc phục
Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng
Remediate from Azure Portal 1. Go to App Service Environments. 2. Click the name of an App Service Environment. 3. Under Settings, click Configuration. 4. Next to Allow TLS 1.0 and 1.1, click the radio button next to Off. 5. Click Save. 6. Click Continue. 7. Repeat steps 1-6 for each App Service Environment requiring remediation.
Thuộc tính
- Hệ điều hành
- Bất kỳ
- Thẻ
- azurecloudcomputetls
- Tham chiếu
- CIS Microsoft Azure Compute Services Benchmark v2.0.0 - 2.9 Ensure App Service Environment has TLS 1.0 and 1.1 disabled