Data protectionLoad Balancer with weak cipher suites
Platform(s)
Compliance Frameworks
- CCM-CSA ,
- GCP CIS ,
- iso_27001_2022 ,
- iso_27002_2022 ,
- New Zealand Information Security Manual ,
- NIST 800-53
Description
Secure Sockets Layer (SSL) policies determine what port Transport Layer Security (TLS) features clients are permitted to use when connecting to load balancers. To prevent usage of insecure features, SSL policies should use (a) at least TLS 1.2 with the MODERN profile; or (b) the RESTRICTED profile, because it effectively requires clients to use TLS 1.2 regardless of the chosen minimum TLS version; or (c) a CUSTOM profile that does not support any weak cipher suites.
Demo the Orca Platform
In just 10 minutes, you’ll see how Orca Security can revolutionize your cloud security strategy. Watch a recorded demo from a cloud security expert now.