Preparing to use TLS 1.2 in Azure ATP

[Itay Argoety]

To provide best-in-class encryption to our customers, in the near future we plan to discontinue the support for Transport Layer Security (TLS) versions 1.0 and 1.1 in Azure ATP.

Sensors running on Windows 2008 R2 have a potential impact since TLS 1.2 is disabled by default.

Follow this instructions to enable TLS 1.2 in Windows 2008 R2 (Client TLS 1.2 is mandatory, Server is optional) 

Sensors running on Windows 2012 or newer support TLS 1.2 by default.

Azure ATP, giving you more to protect your environment.

As always, your feedback is welcome. Stay tuned for additional updates.

[#2]

@Itay Argoety

Hi Itay,

Just thought of checking with you, if the Azure ATP started to use TLS 1.2. If not, may I know from when are we planning to use TLS 1.2?

The reason why I am asking this is because, I have configured the Syslog server in my ATP console to use the protocol as "TLS (Secured Syslog)" and it looks like the logs are not being received on the syslog server.

Upon further troubleshooting, we got to know that the ATP is trying to use TLS 1.0 for encryption.

P.S: We have TLS 1.2 enabled on the DC on which the ATP Sensor is running and configured for forwarding the logs to the syslog server.

Hence, thought of getting some clarity on it.

Thank you.

--

Regards,

Karthik. 

[#3]

@Karthik1600  See https://techcommunity.microsoft.com/t5/Azure-Advanced-Threat-Protection/TLS-version-used-by-Azure-AT...