Network misconfigurations

Azure Network Security Group allows unrestricted access to HTTPS port from the Internet

Compliance Frameworks


Hypertext Transfer Protocol Secure (HTTPS) is an extension of the Hypertext Transfer Protocol (HTTP). It uses cryptography for secure communication over a computer network, and is widely used on the Internet. In HTTPS, the communication protocol is encrypted using Transport Layer Security (TLS) or, formerly, Secure Sockets Layer (SSL). There is a rule configured in {AzureNetworkSecurityGroup} network security group, that allows all incoming traffic to this port from the Internet. In order to keep security best practices and decrease the risk for malicious activities, you should restrict access to be only from allowed IP addresses.
  • Recommended Mitigation

    Configure networking rule to allow incoming traffic to HTTPS port from allowed IP addresses only.