CRITICAL
Source
Trivy
ID
AVD-NIF-0020

An outdated SSL policy is in use by a load balancer.

You should not use outdated/insecure TLS versions for encryption. You should be using TLS v1.2+.

Impact

The SSL policy is outdated and has known vulnerabilities

Follow the appropriate remediation steps below to resolve the issue.

Use a more recent TLS/SSL policy for the load balancer

1
2
3
4
5
6
 resource "nifcloud_load_balancer" "good_example" {
    load_balancer_port  = 443
    policy_type         = "standard"
    ssl_policy_name     = "Standard Ciphers D ver1"
 }