Forum Discussion

N V's avatar
N V
Copper Contributor
Jul 02, 2017

Azure Web Application Gateway (WAF) Cipher Suites

Hello , I've installed SSL certiifcate on Azure WAF. After a quick test on ssllabs, we've got a grade of B. Main cause : Server supports weak Diffie-Hellman(DH) key exchange parameters.   After s...
azure
networking
virtual network
Kent Gaardmand's avatar
Kent Gaardmand
Iron Contributor
Jul 04, 2017

Application Gateway supports disabling the following protocol version; TLSv1.0, TLSv1.1, and TLSv1.2.

 

see step 11 here

N V's avatar
N V
Copper Contributor
Jul 05, 2017

Is it best practice to disable TLS ?

  • Kent Gaardmand's avatar
    Kent Gaardmand
    Iron Contributor
    Jul 05, 2017

    there is know security risks to leave it open, so unless you have legacy devices, then yes

Resources