Description

Secure Sockets Layer (SSL) policies determine what port Transport Layer Security (TLS) features clients are permitted to use when connecting to load balancers. To prevent usage of insecure features, SSL policies should use (a) at least TLS 1.2 with the MODERN profile; or (b) the RESTRICTED profile, because it effectively requires clients to use TLS 1.2 regardless of the chosen minimum TLS version; or (c) a CUSTOM profile that does not support any weak cipher suites.

• 

  Recommended Mitigation

  Change the SSL policy to use at least TLS 1.2 with the MODERN profile or the RESTRICTED profile.