TLS version used by Azure ATP

[Karthik1600]

Hi All,

I would like to know what is the TLS version currently used by Azure ATP for encryption?

The reason why I am asking this is because, I have configured the Syslog server in my Azure ATP console to use the protocol as "TLS (Secured Syslog)" and it looks like the logs are not being received on the syslog server.

Upon further troubleshooting, we got to know that the ATP is trying to use TLS 1.0 for encryption.

P.S: We have TLS 1.2 enabled on the DC on which the ATP Sensor is running and have configured it for forwarding the logs to the syslog server.

Hence, thought of getting some clarity on it.

Thank you.

--

Regards,

Karthik. 

[#2]

@Karthik1600 

AATP uses TLS 1.2 across the board with one exception: the syslog listener,

which is locked to TLS 1.0.

There are no plans to change that any time soon as this functionality within AATP is expensive fix and going to be deprecated. with the move to the new unified portal, you will be able to get syslog notifications from there, with the greatest and latest features, including a better TLS support.  

[#3]

Hi Eli,
Thanks for the quick reply.