YutangLin does it also apply to the port 8172 (Web Deploy service) and the port 455 (Management) of Azure App Services? As I've checked again, it works well with the port 443, but the other ports like 8172 and port 455, which are still using the CBC mode as the following:
Port: 8172 | Protocol: tcp
tlsv1_2:TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
tlsv1_2:TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
tlsv1_2:TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
tlsv1_2:TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
tlsv1_2:TLS_RSA_WITH_AES_256_CBC_SHA256
tlsv1_2:TLS_RSA_WITH_AES_128_CBC_SHA256
tlsv1_2:TLS_RSA_WITH_AES_256_CBC_SHA
tlsv1_2:TLS_RSA_WITH_AES_128_CBC_SHA
Port: 455 | Protocol: tcp
tlsv1_2:TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
tlsv1_2:TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
tlsv1_2:TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
tlsv1_2:TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
tlsv1_2:TLS_RSA_WITH_AES_256_CBC_SHA256
tlsv1_2:TLS_RSA_WITH_AES_128_CBC_SHA256
tlsv1_2:TLS_RSA_WITH_AES_256_CBC_SHA
tlsv1_2:TLS_RSA_WITH_AES_128_CBC_SHA