Share via

Is custom TLS cipher suite configuration supported for Azure Front Door Premium in Azure Government?

Javal Patel 20 Reputation points
2026-02-23T20:53:16.4666667+00:00

We are using Azure Front Door Premium in Azure Government as our public endpoint. TLS is terminated at Front Door.

A recent vulnerability assessment scan identified the following cipher suites as enabled on our Front Door endpoint:

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

The scanner detects these CBC-based TLS 1.2 cipher suites at the Front Door layer.

We do not see any option in the Azure Government portal to customize or disable specific TLS cipher suites for Front Door Premium. The only visible setting is the minimum TLS version, which is already set to TLS 1.2.User's image

Azure Front Door
Azure Front Door

An Azure service that provides a cloud content delivery network with threat protection.

{count} votes

Answer accepted by question author
  1. Vallepu Venkateswarlu 6,135 Reputation points Microsoft External Staff Moderator
    2026-02-23T21:49:12.1266667+00:00

    Hi @ Javal Patel

    Welcome to Microsoft Q&A Platform.

    Thank you for contacting us about the Azure Front Door Premium TLS issue.

    As discussed offline on Teams, customizing or disabling specific TLS cipher suites for Front Door is currently not supported in the Azure Government portal.

    You can find the update in Azure Update page: Azure updates | Microsoft Azure

    Please210246-screenshot-2021-12-10-121802.pngand “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

    0 comments No comments

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.