FTP deployments should be disabled

Documentos > Datadog Security > OOTB Rules > FTP deployments should be disabled

This page is not yet available in Spanish. We are working on its translation.
If you have any questions or feedback about our current translation project, feel free to reach out to us!

Description

By default, Azure Functions, App Service applications, and API Apps can be deployed over FTP. If an essential deployment workflow requires FTP, your system should enforce FTPS for FTP login for all App Service applications and functions.

Remediation

From the console

Go to the Azure Portal
Select App Services
Click on an app
Select Settings and then Configuration
Under General Settings, for the Platform Settings, the FTP state should not be set to All allowed