tls-version-check.md

AZURE / App Service / TLS Version Check

Quick Info

Plugin Title	TLS Version Check
Cloud	AZURE
Category	App Service
Description	Ensures that all web apps are using the latest version of TLS
More Info	App Services currently allows web apps to use TLS versions 1.0, 1.1 and 1.2. It is highly recommended to use the latest TLS 1.2 version for web app TLS connections.
AZURE Link	https://azure.microsoft.com/en-in/updates/app-service-and-functions-hosted-apps-can-now-update-tls-versions/
Recommended Action	Set the minimum TLS version to 1.2 for all App Services.

Detailed Remediation Steps

1. Log into the Microsoft Azure Management Console.
2. Select the "Search resources, services, and docs" option at the top and search for App Services.
   
3. Select the "App Services" by clicking on the "Name" link to access the configuration changes.
   
4. Scroll down the selected "App Services" navigation panel and in "Settings" click on the "TLS/SSL settings" option.
   
5. On the "TLS/SSL settings" page under the Protocol settings tab,scroll down and check the "Minimum TLS Vesrion". It's recommended to use only latest version of the "TLS/SSL" always.
   
6. Repeat steps number 2 - 5 to verify other "Apps" using latest TLS/SSL version in the account.
   
7. Navigate to the "App Services", select the "App Service" and click on the "Name" as a link to access the configuration, select the "TLS/SSL settings" under "Settings."
   
8. On the "TLS/SSL settings" page scroll down and at the "Minimum TLS version" choose the latest version of the TLS/SSL from the menu and click on the "Save" button to make the changes.
   
9. Repeat above steps to ensure the latest version of TLS/SSL is running on all App Services.