| Plugin Title | LB HTTPS Only |
| Cloud | AZURE |
| Category | Load Balancer |
| Description | Ensures load balancers are configured to only accept connections on HTTPS ports |
| More Info | For maximum security, load balancers can be configured to only accept HTTPS connections. Standard HTTP connections will be blocked. This should only be done if the client application is configured to query HTTPS directly and not rely on a redirect from HTTP. |
| AZURE Link | https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-overview |
| Recommended Action | Ensure that each load balancer only accepts connections on port 443. |
- Log into the Microsoft Azure Management Console.
- Select the "Search resources, services, and docs" option at the top and search for Load balancers.
- Select the "Load balancer" by clicking on the "Name" as a link which needs to be configured only to accept connections on HTTPS ports.
- On the "load balancer" page, scroll down the left navigation panel and choose the "Load balancing rules" option under "Settings".
- On the "Load balancing rules" page if the "Load balancing rule" is showing as "TCP/80" then the selected "Load balancer" is configured to accept connections on HTTP ports.
- Repeat steps number 2 - 5 to verify other "Load balancers" in the account.
- Navigate to "Load Balancer", select the "Load balancer" by clicking on the "Name" as a link, scroll down the left navigation panel and choose "Load balancing rule."
- On the "Load balancing rule" page click on the "Name" as a link to access the configuration changes.
- Scroll down the "Load balancing rule" page and select the "Port" and "Backend Port" as 443 and save the changes.
- Repeat the steps number 7 - 9 to ensure that each load balancer only accepts connections on port 443.
