More Info:

Ensure that the tls_version parameter is set to TLSV1.2

Risk Level

Medium

Address

Security

Compliance Standards

SOC2, ISO27001

Triage and Remediation

Remediation

To remediate the TLS Protocol Latest Version misconfiguration in Azure using the Azure console, follow the steps below:

Step 1: Log in to the Azure portal and navigate to the virtual machine that needs to be remediated.

Step 2: Open the virtual machine and click on the “Networking” tab.

Step 3: Under “Settings”, click on “Network Security Group”.

Step 4: Click on the Network Security Group that is associated with the virtual machine.

Step 5: Click on “Inbound security rules” and then click on “Add”.

Step 6: In the “Add inbound security rule” page, enter the following details:

  • Name: A name for the rule (e.g. “TLS Latest Version”)
  • Priority: A priority number for the rule (e.g. 100)
  • Source: Any
  • Source port ranges: *
  • Destination: Any
  • Destination port ranges: 443
  • Protocol: TCP
  • Action: Allow
  • Priority: 100

Step 7: Click on “Review + create” and then click on “Create” to create the new inbound security rule.

Step 8: Once the rule is created, it will be automatically applied to the virtual machine.

By following these steps, you have successfully remediated the TLS Protocol Latest Version misconfiguration in Azure using the Azure console.