Free Assessment

Azure_AppService_10

Ensure that ' HTTP Version ' is the latest, if used to run the web app

Description

Periodically, newer versions are released for HTTP either due to security flaws or to include additional functionality. Using the latest HTTP version for web apps to take advantage of security fixes, if any, and/or new functionalities of the newer version.

Remediation

Perform the following in the Azure Console:

  1. Login to Azure Portal using https://portal.azure.com
  2. Go to App Services
  3. Click on each App
  4. Under Setting section, Click on Application settings
  5. Set HTTP version to 2.0 under General settings

Perform the following in Azure Command Line Interface 2.0:

To set HTTP 2.0 version for an existing app, run the following command.

az webapp config set –resource-group <RESOURCE_GROUP_NAME> –name <APP_NAME> –http20-enabled true

References:

  1. https://docs.microsoft.com/en-us/azure/app-service/web-sites-configure#general-settings

Service

AppService

Severity

Medium

Compliance

Mapping

Want to Know More?

Learn how our partners are managing their cloud security and compliance with Cloudlytics.

I hereby accept the GDPR and Privacy Policy, by subscribing to the newsletters.

Cloudlytics

Solutions

Resources

Company

Legal

Facebook Twitter Linkedin Youtube
Start Free Trial
Login

CLOSE

We are now live on AWS Marketplace.
The integrated view of your cloud infrastructure is now easier than ever!

Learn More