rules/findings/azure/Networking/azure-app-gateway-min-tls-not-compliant.json
|
{
"provider": "Azure", "serviceType": "Networking Services", "serviceName": "Networking Services", "displayName": "Ensure the SSL policy\u0027s \u0027Min protocol version\u0027 is set to \u0027TLSv1_2\u0027 or higher on Azure Application Gateway", "description": "The TLS (Transport Layer Security) protocol secures the transmission of data over the internet using standard encryption technology. Application gateways use TLS 1.2 for the Min protocol version by default and allow for the use of TLS versions 1.0, 1.1, and\n1.3. NIST strongly suggests the use of TLS 1.2 and recommends the adoption of TLS\n1.3.", "rationale": "TLS 1.0 and 1.1 are outdated and vulnerable to security risks. Since TLS 1.2 and TLS 1.3 provide enhanced security and improved performance, it is highly recommended to use TLS 1.2 or higher whenever possible.", "impact": "Using the latest TLS version may affect compatibility with clients and backend services.", "remediation": { "text": "\n\t\t\tRemediate from Azure Portal\n\t\t\t\t1. Go to Application gateways.\n\t\t\t\t2. Click the name of an application gateway.\n\t\t\t\t3. Under Settings, click Listeners.\n\t\t\t\t4. Under SSL Policy, next to the Selected SSL Policy name, click change.\n\t\t\t\t5. Select an appropriate SSL policy with a Min protocol version of TLSv1_2 or \n\t\t\t\thigher.\n\t\t\t\t6. Click Save.\n\t\t\t\t7. Repeat steps 1-6 for each application gateway requiring remediation.\n\t\t", "code": { "powerShell": null, "iac": null, "terraform": null, "other": null } }, "recommendation": null, "references": [ "https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-ssl-policy-overview", "https://learn.microsoft.com/en-us/cli/azure/network/application-gateway?view=azure-cli-latest" ], "compliance": [ { "name": "CIS Microsoft Azure Foundations", "version": "5.0.0", "reference": "7.12", "profile": [ "Level 1" ] } ], "level": "medium", "tags": [], "rule": { "path": "", "subPath": null, "selectCondition": {}, "query": [], "shouldExist": null, "returnObject": null, "removeIfNotExists": null }, "output": { "html": { "data": { "properties": {}, "expandObject": null }, "table": "default", "decorate": [], "emphasis": [], "actions": { "objectData": { "properties": [], "expandObject": null, "limit": null }, "showGoToButton": "True", "showModalButton": "True", "directLink": null } }, "text": { "data": { "properties": {}, "expandObject": null }, "status": { "keyName": [], "message": "", "defaultMessage": null }, "properties": { "resourceName": null, "resourceId": null, "resourceType": null }, "onlyStatus": false } }, "idSuffix": "", "notes": [], "categories": [], "immutableProperties": [], "id": "azure_networking_008" } |