Network misconfigurations

Azure PostgreSQL Server SSL-Only Disabled

Risk Level

Informational (4)

Compliance Frameworks


Azure Database for PostgreSQL allows by default to prefer connections using TLS (previously known as SSL). enforcing TLS connections helps protect against 'man-in-the-middle' attacks by encrypting the data stream. The server {AzurePostgresDbServer} was found configured without SSL enforce enabled when accessed.