Forum Discussion

Copper Contributor

Jan 26, 2021

Change SSL policy on a production server

Hi, I'm using the Application Gateway (WAF V2) on a service on production. It has TLS1.0 and TLS1.1 that I want to disable and just keep TLS1.2. By doing the changes it will stop the network a...

OgawaKen

Copper Contributor

Jan 26, 2021

ibnmbodji

Thank you for your replay. I think I should explained better my message.

So it's basically User -> (Internet) -> AGW -> Servers

Now between "User -> (Internet) -> AGW" it uses TLS1.0, 1.1 and 1.2.

In a near future I want to change it to just TLS 1.2 (TLS1.3 also if available)

I think modifying this it wouldn't affect "AGW -> Servers" TLS connection, right?

Regards

ibnmbodji

Iron Contributor

Jan 28, 2021

OgawaKen

Yes there is no impact since TLS encryption for communication between the client and the application gateway is different from TLS encryption for communication between the application gateway and the back-end servers.

https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-end-to-end-ssl-powershell

OgawaKen
Copper Contributor
Feb 01, 2021
ibnmbodjiSo I wonder when I press Save on "Change SSL policy" (as the image attached on this message) the AGW will stop for some seconds or the service will continue without any stop.
Regards
- ibnmbodji
  Iron Contributor
  Feb 01, 2021
  OgawaKen
  
  Hi normally downtime is not expected but the changes should take few minutes to be applied .
  I would suggest to use Preprod or Dev environment to test changes before production.