MEDIUM
Source
CloudSploit
ID
application-gateway-https-listener

Application Gateway HTTPS Listener

Ensures that Application Gateway is configured to use HTTPS liteners only.

Using non-HTTPS listeners leaves the traffic between the client and the application unencrypted. Using HTTPS listeners instead providing an additional layer of security by ensuring encryption, reducing risk of security attacks and breaches.

Remove all non-HTTPS listeners from application gateway and replace them with https listeners.