App Service should use the latest version of TLS encryption

Description

The TLS (Transport Layer Security) protocol secures transmission of data over the internet using standard encryption technology. Encryption should be set with the latest version of TLS. App Service uses TLS 1.2 by default, which is the recommended TLS level by industry standards, such as PCI DSS. App Service currently allows web apps to set TLS versions 1.0, 1.1 and 1.2. It is highly recommended to use the latest TLS 1.2 version for a secure connection.

Remediation

From the console

  1. Log in to Azure Portal using https://portal.azure.com.
  2. Go to App Services.
  3. Click on each App
  4. Under Setting section, Click on SSL settings.
  5. Under Protocol Settings, set Minimum TLS Version to 1.2.
PREVIEWING: esther/docs-8632-slo-blog-links