/
Web Application Should Only be Accessible Over HTTPS
Web Application Should Only be Accessible Over HTTPS
Description:
Use of HTTPS ensures server/service authentication and protects data in transit from network layer eavesdropping attacks.
Solution:
To redirect all HTTP traffic to HTTPS, we recommend the following steps:
1. Go to the app service custom domains page
2. In the HTTPS Only toggle select On
, multiple selections available,
Related content
API App Should Only be Accessible Over HTTPS
API App Should Only be Accessible Over HTTPS
More like this
Web/Function Application Should Only be Accessible Over HTTPS
Web/Function Application Should Only be Accessible Over HTTPS
More like this
Web Apps Should Request an SSL Certificate for All Incoming Requests
Web Apps Should Request an SSL Certificate for All Incoming Requests
More like this
Function apps should have Client Certificates (Incoming client certificates) enabled
Function apps should have Client Certificates (Incoming client certificates) enabled
More like this
Authentication should be enabled on your web app
Authentication should be enabled on your web app
More like this
Web Application Firewall (WAF) Should Be Enabled for Application Gateway
Web Application Firewall (WAF) Should Be Enabled for Application Gateway
More like this