Skip to content

Latest commit

 

History

History
18 lines (13 loc) · 880 Bytes

lb-https-only.md

File metadata and controls

18 lines (13 loc) · 880 Bytes

CloudSploit

AZURE / Load Balancer / LB HTTPS Only

Quick Info

Plugin Title LB HTTPS Only
Cloud AZURE
Category Load Balancer
Description Ensures load balancers are configured to only accept connections on HTTPS ports
More Info For maximum security, load balancers can be configured to only accept HTTPS connections. Standard HTTP connections will be blocked. This should only be done if the client application is configured to query HTTPS directly and not rely on a redirect from HTTP.
AZURE Link https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-overview
Recommended Action Ensure that each load balancer only accepts connections on port 443.

Detailed Remediation Steps