Data protectionLoad Balancer with weak cipher suites
Platform(s)
Compliance Frameworks
CCM-CSA, GCP CIS, iso_27001_2022, iso_27002_2022, New Zealand Information Security Manual, NIST 800-53
Description
Secure Sockets Layer (SSL) policies determine what port Transport Layer Security (TLS) features clients are permitted to use when connecting to load balancers. To prevent usage of insecure features, SSL policies should use (a) at least TLS 1.2 with the MODERN profile; or (b) the RESTRICTED profile, because it effectively requires clients to use TLS 1.2 regardless of the chosen minimum TLS version; or (c) a CUSTOM profile that does not support any weak cipher suites.
Personalized Demo
See Orca Security in Action
Gain visibility, achieve compliance, and prioritize risks with the Orca Cloud Security Platform.