Quick Info
| Plugin Title | TLS Version Check |
| Cloud | AZURE |
| Category | App Service |
| Description | Ensures that all web apps are using the latest version of TLS |
| More Info | App Services currently allows web apps to use TLS versions 1.0, 1.1 and 1.2. It is highly recommended to use the latest TLS 1.2 version for web app TLS connections. |
| AZURE Link | https://azure.microsoft.com/en-in/updates/app-service-and-functions-hosted-apps-can-now-update-tls-versions/ |
| Recommended Action | Set the minimum TLS version to 1.2 for all App Services. |
Detailed Remediation Steps
- Log into the Microsoft Azure Management Console.
- Select the “Search resources, services, and docs” option at the top and search for App Services.
- Select the “App Services” by clicking on the “Name” link to access the configuration changes.
- Scroll down the selected “App Services” navigation panel and in “Settings” click on the “TLS/SSL settings” option.
- On the “TLS/SSL settings” page under the Protocol settings tab,scroll down and check the “Minimum TLS Vesrion”. It’s recommended to use only latest version of the “TLS/SSL” always.
- Repeat steps number 2 - 5 to verify other “Apps” using latest TLS/SSL version in the account.
- Navigate to the “App Services”, select the “App Service” and click on the “Name” as a link to access the configuration, select the “TLS/SSL settings” under “Settings."
- On the “TLS/SSL settings” page scroll down and at the “Minimum TLS version” choose the latest version of the TLS/SSL from the menu and click on the “Save” button to make the changes.
- Repeat above steps to ensure the latest version of TLS/SSL is running on all App Services.