Skip to content

Latest commit

 

History

History
27 lines (22 loc) · 2.31 KB

tls-version-check.md

File metadata and controls

27 lines (22 loc) · 2.31 KB

CloudSploit

AZURE / App Service / TLS Version Check

Quick Info

Plugin Title TLS Version Check
Cloud AZURE
Category App Service
Description Ensures that all web apps are using the latest version of TLS
More Info App Services currently allows web apps to use TLS versions 1.0, 1.1 and 1.2. It is highly recommended to use the latest TLS 1.2 version for web app TLS connections.
AZURE Link https://azure.microsoft.com/en-in/updates/app-service-and-functions-hosted-apps-can-now-update-tls-versions/
Recommended Action Set the minimum TLS version to 1.2 for all App Services.

Detailed Remediation Steps

  1. Log into the Microsoft Azure Management Console.
  2. Select the "Search resources, services, and docs" option at the top and search for App Services.
  3. Select the "App Services" by clicking on the "Name" link to access the configuration changes.
  4. Scroll down the selected "App Services" navigation panel and in "Settings" click on the "TLS/SSL settings" option.
  5. On the "TLS/SSL settings" page under the Protocol settings tab,scroll down and check the "Minimum TLS Vesrion". It's recommended to use only latest version of the "TLS/SSL" always.
  6. Repeat steps number 2 - 5 to verify other "Apps" using latest TLS/SSL version in the account.
  7. Navigate to the "App Services", select the "App Service" and click on the "Name" as a link to access the configuration, select the "TLS/SSL settings" under "Settings."
  8. On the "TLS/SSL settings" page scroll down and at the "Minimum TLS version" choose the latest version of the TLS/SSL from the menu and click on the "Save" button to make the changes.
  9. Repeat above steps to ensure the latest version of TLS/SSL is running on all App Services.