Forum Discussion

Karthik1600's avatar
Karthik1600
Copper Contributor
Dec 10, 2019

TLS version used by Azure ATP

Hi All,

 

I would like to know what is the TLS version currently used by Azure ATP for encryption?

 

The reason why I am asking this is because, I have configured the Syslog server in my Azure ATP console to use the protocol as "TLS (Secured Syslog)" and it looks like the logs are not being received on the syslog server.

 

Upon further troubleshooting, we got to know that the ATP is trying to use TLS 1.0 for encryption.

 

P.S: We have TLS 1.2 enabled on the DC on which the ATP Sensor is running and have configured it for forwarding the logs to the syslog server.

 

Hence, thought of getting some clarity on it.

 

Thank you.

 

--

Regards,

Karthik. 

  • EliOfek's avatar
    EliOfek
    Icon for Microsoft rankMicrosoft
    Dec 10, 2019

    Karthik1600 

    AATP uses TLS 1.2 across the board with one exception: the syslog listener,

    which is locked to TLS 1.0.

    There are no plans to change that any time soon as this functionality within AATP is expensive fix and going to be deprecated. with the move to the new unified portal, you will be able to get syslog notifications from there, with the greatest and latest features, including a better TLS support.  

Resources