Is there another way to disable weak TLS cipher suites in Azure Function App Consumption Plan?

Question

I saw that there is a way to choose Minimum Inbound TLS Cipher Suite directly through the configuration > General settings, but this feature only appears for Functions of the Elastic premium plan. Where can I point this configuration for Functions of the consumption plan?

Answer 1

Hi,

So far in Preview this feature is only available for Premium SKU Functions/App Services.

One option you have for Consumption plan to accomplish similar goal is to set Minimum TLS version to 1.3 via General settings tab. In this way vulnerable ciphers are not supported since TLS 1.3 eliminated support for them.

Naturally at some point in the future (if not already) it is likely a vulnerability will be found with cipher supported by TLS 1.3.

Please click Accept Answer if the above was helpful.

Thanks.

-TP