Description

Hypertext Transfer Protocol Secure (HTTPS) is an extension of the Hypertext Transfer Protocol (HTTP). It uses cryptography for secure communication over a computer network, and is widely used on the Internet. In HTTPS, the communication protocol is encrypted using Transport Layer Security (TLS) or, formerly, Secure Sockets Layer (SSL). There is a rule configured in {AzureNetworkSecurityGroup} network security group, that allows all incoming traffic to this port from the Internet. In order to keep security best practices and decrease the risk for malicious activities, you should restrict access to be only from allowed IP addresses.

• 

  Recommended Mitigation

  Configure networking rule to allow incoming traffic to HTTPS port from allowed IP addresses only.