Skip to main content

💼 9.2 Ensure web app redirects all HTTP traffic to HTTPS in Azure App Service - Level 1 (Automated)

  • ID: /frameworks/cis-azure-v1.3.0/09/02

Stats​

not available

Description​

Azure Web Apps allows sites to run under both HTTP and HTTPS by default. Web apps can be accessed by anyone using non-secure HTTP links by default. Non-secure HTTP requests can be restricted and all HTTP requests redirected to the secure HTTPS port. It is recommended to enforce HTTPS-only traffic.

Similar​

  • Internal
    • ID: dec-c-ce4b2319

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance

Policies (1)​

PolicyLogic CountFlagsCompliance
🛡️ Azure App Service HTTPS Only configuration is not enabled🟢1🟢 x6no data

Internal Rules​

RulePoliciesFlags
✉️ dec-x-75db76ad1