Neglected assets

Azure SQL server Minimum TLS version is set to outdated version or not configured at all

Description

It was detected that {AzureSqlDbServer} SQL server Minimum TLS version is set to outdated version or not configured at all. The minimal Transport Layer Security (TLS) version setting allows customers to decide which version of TLS their SQL database uses. Setting a minimal TLS version ensures that newer TLS versions are supported. The default for the minimal TLS version is to allow all versions. After you enforce a version of TLS, it's not possible to revert to the default.
  • Recommended Mitigation

    It's recommended to set the minimal TLS version to 1.2. This version includes fixes for vulnerabilities in previous versions and is the highest version of TLS that's supported in Azure SQL Database.