Forum Discussion
Feedback: Some ASC policies do not work
Adding Ben Kliger and Meital Taran- Gutman. Can either of you speak to this?
- Meital Taran- GutmanMar 03, 2019
Microsoft
in the last few months, ASC moved to Azure Policy as the main platform for running its security assessments. This means that since then, all ASC recommendations are manifested as policy definitions in Azure Policy.
Unfortunately we had an issue of inconsistency between the compliance results shown in Policy vs. those shows in ASC. This has been fixed already. Can you confirm if this issue still reproduced in your environment?
- Apr 04, 2019
Meital Taran- Gutman This policy still does not work and I never got reply on why is this. Are you looking into this problem?
- Meital Taran- GutmanApr 04, 2019
Microsoft
Stanislav_Zhelyazkov it should show the correct result however there might be data freshness issues. is the resource live more than 12 hours? Also, we'd like to take a closer look and make sure, can you send me the resource name and subscription ID to metaran@microsoft.com
- Mar 14, 2019
Hi Meital,
There is no change in the behavior example I have posted. Still ASC shows the https recommendation for function app, ASC policy marks that as compliant. ASC recommendation is correct as my function is enabled for both https and http.