Forum Discussion

N V's avatar
N V
Copper Contributor
Jul 02, 2017

Azure Web Application Gateway (WAF) Cipher Suites

Hello , I've installed SSL certiifcate on Azure WAF. After a quick test on ssllabs, we've got a grade of B. Main cause : Server supports weak Diffie-Hellman(DH) key exchange parameters.   After s...
azure
networking
virtual network
Kent Gaardmand's avatar
Kent Gaardmand
Iron Contributor
Jul 04, 2017

Application Gateway supports disabling the following protocol version; TLSv1.0, TLSv1.1, and TLSv1.2.

 

see step 11 here

  • N V's avatar
    N V
    Copper Contributor
    Jul 05, 2017

    Is it best practice to disable TLS ?

    • Kent Gaardmand's avatar
      Kent Gaardmand
      Iron Contributor
      Jul 05, 2017

      there is know security risks to leave it open, so unless you have legacy devices, then yes

Resources