Network misconfigurationsAzure Application Gateway listener(s) with insecure protocol for trusted certificates
Platform(s)
Compliance Frameworks
- Brazilian General Data Protection (LGPD) ,
- CCM-CSA ,
- CCPA ,
- cis_8 ,
- CPRA ,
- hdh ,
- ISO 27701 ,
- iso_27001_2022 ,
- iso_27002_2022 ,
- Microsoft Cloud Security Benchmark ,
- New Zealand Information Security Manual ,
- NIST 800-171 ,
- NIST 800-53 ,
- PDPA ,
- UK Cyber Essentials
Description
Azure Application Gateway is a web traffic load balancer that enables you to manage traffic to your web applications, offering various Layer 7 load-balancing capabilities. TLS (Transport Layer Security)/SSL (Secure Sockets Layer) is the standard security technology for establishing an encrypted link between a web server and a browser. This link ensures that all data passed between the web server and browsers remain private and encrypted. The Azure Application Gateway - {AzureApplicationGateway} has a listener(s) without SSL enabled, for example - {AzureApplicationGateway.HttpListeners.Name}. For more information about SSL with Azure Application Gateway - https://docs.microsoft.com/en-us/azure/application-gateway/ssl-overview
Demo the Orca Platform
In just 10 minutes, you’ll see how Orca Security can revolutionize your cloud security strategy. Watch a recorded demo from a cloud security expert now.