Skip to main content

💼 7.2.2 Ensure the SSL Policy's 'Min protocol version' is Set to 'TLSv1_2' or Higher on Azure Application Gateway (Automated)

  • ID: /frameworks/cis-azure-v7.0.0/07/02/02

Stats​

not available

Description​

Azure Application Gateway sets the minimum TLS version for client connections through its SSL policy, at the gateway and in each SSL profile. The Min protocol version selects TLSv1_0, TLSv1_1, TLSv1_2, or TLSv1_3; Microsoft no longer supports TLS 1.0 or 1.1, but a gateway can carry policies that allow them.

Similar​

  • Sections
    • /frameworks/cis-azure-v6.0.0/07/12

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 CIS Azure v6.0.0 → 💼 7.12 Ensure the SSL Policy's 'Min protocol version' is Set to 'TLSv1_2' or Higher on Azure Application Gateway (Automated)1no data

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 CIS Azure v6.0.0 → 💼 7.12 Ensure the SSL Policy's 'Min protocol version' is Set to 'TLSv1_2' or Higher on Azure Application Gateway (Automated)1no data

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance

Policies (1)​

PolicyLogic CountFlagsCompliance
🛡️ Azure Application Gateway Min SSL protocol version is not TLSv1_2🟢1🟢 x6no data