Forum Discussion
Solved
How to Enforce FTP Disablement on Newly Created App Service/Function Apps in Azure?
Is there a way to enforce that newly created App Services and Function Apps will have the FTP disabled in Azure? I am aware that I can turn off the FTP manually by changing the configuration in the A...
UserID707597 You can do this with PowerShell:
Set-AzWebApp -ResourceGroupName $ResourceGroupName -Name $WebAppName -FtpsState Disabled
Or you could enforce it using Azure Policy- there's an example https://charbelnemnom.com/enable-ftps-on-azure-app-services-with-azure-policy/ on enforcing FTPS, I think the only change you'd need would be to change"ftpsState": "FtpsOnly"
to"ftpsState": "Disabled"
in the policy definition.
UserID707597 You can do this with PowerShell:
Set-AzWebApp -ResourceGroupName $ResourceGroupName -Name $WebAppName -FtpsState Disabled
Or you could enforce it using Azure Policy- there's an example https://charbelnemnom.com/enable-ftps-on-azure-app-services-with-azure-policy/ on enforcing FTPS, I think the only change you'd need would be to change
"ftpsState": "FtpsOnly"
to
"ftpsState": "Disabled"
in the policy definition.
Hi Chris,
This works on my tenant, thank you! But would you know if there's a way for this policy to be prioritized first? Because I've tested this in my organization's tenant and it does not change the configuration of FTP. Maybe because there are existing policies in my organization's tenant that overrides this policy.
This works on my tenant, thank you! But would you know if there's a way for this policy to be prioritized first? Because I've tested this in my organization's tenant and it does not change the configuration of FTP. Maybe because there are existing policies in my organization's tenant that overrides this policy.