Description

Azure Application Gateway is a web traffic load balancer that enables you to manage traffic to your web applications, offering various Layer 7 load-balancing capabilities. TLS (Transport Layer Security)/SSL (Secure Sockets Layer) is the standard security technology for establishing an encrypted link between a web server and a browser. This link ensures that all data passed between the web server and browsers remain private and encrypted. The Azure Application Gateway - {AzureApplicationGateway} has a listener(s) without SSL enabled, for example - {AzureApplicationGateway.HttpListeners.Name}. For more information about SSL with Azure Application Gateway - https://docs.microsoft.com/en-us/azure/application-gateway/ssl-overview

• 

  Recommended Mitigation

  It is recommended to review the Azure Application Gateway configuration and if needed enable HTTPS/SSL. For more information - <a href="https://docs.microsoft.com/en-us/azure/application-gateway/create-ssl-portal." target="_blank" rel="noopener noreferrer">https://docs.microsoft.com/en-us/azure/application-gateway/create-ssl-portal.</a>