Azure Front Door and Weak Cypher

Question

In Azure Application Gateway we can disable weak cypher so how to disable weak cypher for Azure Front door we are a payment gateway merchant and this is essential to meet our qualys certification

Answer 1

Actually, I think I just found the answer we were looking for here.

Azure Front Door doesn’t support configuring specific cipher suites. You can get your own custom TLS/SSL certificate from your Certificate Authority (For example: Verisign, Entrust, or DigiCert). Then have specific cipher suites marked on the certificate when you generate it.

It would be great to have a Front Door feature where this was configurable.

Answer 2

Hello @Nick Diaz

Welcome to Microsoft Q&A Platform,

You should be able to do it from the Front Door custom domain settings, please refer to the thread below as it's related to the same topic:

https://learn.microsoft.com/en-us/answers/questions/202490/how-to-remove-weak-ciphers-from-tls-12-configurati.html

I hope this helps!

----------

Please don’t forget to "Accept the answer" and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

Answer 3

Hi @Nick Diaz did you end up finding a workaround for this missing feature?