💼 3.9 Ensure No HTTPS or SSL Proxy Load Balancers Permit SSL Policies With Weak Cipher Suites - Level 1 (Manual)
- ID:
/frameworks/cis-gcp-v4.0.0/03/09
Description
Secure Sockets Layer (SSL) policies determine what port Transport Layer Security (TLS) features clients are permitted to use when connecting to load balancers. To prevent usage of insecure features, SSL policies should use (a) at least TLS 1.2 with the MODERN profile; or (b) the RESTRICTED profile, because it effectively requires clients to use TLS 1.2 regardless of the chosen minimum TLS version; or (3) a CUSTOM profile that does not support any of the following features: n nTLS_RSA_WITH_AES_128_GCM_SHA256nTLS_RSA_WITH_AES_256_GCM_SHA384nTLS_RSA_WITH_AES_128_CBC_SHAn TLS_RSA_WITH_AES_256_CBC_SHAnTLS_RSA_WITH_3DES_EDE_CBC_SHAn
Similar
- Sections
/frameworks/cis-gcp-v3.0.0/03/09
Similar Sections (Take Policies From)
Similar Sections (Give Policies To)
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|
Policies (1)