Determine if any TLS 1 / 1.1 connections are being established to ASE

Question

I need to change TLS on ASE to only accept TLS 1.2 connections. But before doing that I want to check if TLS 1/1.1 connection are being established currently or not. How can I do that?

Answer 1

Hello , Welcome to Microsoft Q&A

• Navigate to your App Service Environment in the Azure portal.
• Go to the "Settings" section and select "Configuration."
• Under the "General settings" tab, find the Tls setting and check what have been configured

References:

• Custom configuration settings for App Service Environments

Please let me know if any questions

Kindly accept answer if it helps

Thanks

Deepanshu

Answer 2

@curious7 Thanks for posting your question in Microsoft Q&A, apologize for any inconvenience caused on this.

• You can use the "Minimum TLS version Checker" detector in Diagnose and Solve problems of your app service to know count of requests that has been reached out to your app service and with their TLS versions.
• Also, refer to this similar thread in SO, to check which TLS version of request using the X-forwarded-TlsVersion header.
• If you want to test your app service as mentioned here, it is suggested to use 3rd party tool SSL labs.
• Follow the steps shared by Deepanshukatara-6769 to update the TLS version of your ASE.

Hope this helps, Let me know if you have any further questions on this.