How to disable weak TLS chiper suit on classic Azure front door and Azure CDN?

Question

How to disable weak TLS chiper suit on classic Azure front door and Azure CDN?

Answer 1

Hi Mall Ashi,

Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.

I understand that you would like to disable the weak Cipher Suite on your Azure CDN Front Door.

Azure Front Door supports three versions of the TLS protocol: TLS versions 1.0, 1.1, and 1.2. All Azure Front Door profiles created after September 2019 use TLS 1.2 as the default minimum, but TLS 1.0 and TLS 1.1 are still supported for backward compatibility.

Refer: https://learn.microsoft.com/en-us/azure/frontdoor/end-to-end-tls#supported-tls-versions

The supported cipher suites are listed in the below doc:

https://learn.microsoft.com/en-us/azure/frontdoor/end-to-end-tls?pivots=front-door-standard-premium#supported-cipher-suites

If you wish you may upvote the feedback in the below forum requesting this feature. All the feedback you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Azure.

https://feedback.azure.com/d365community/idea/ef6fe1c6-8426-ec11-b6e6-000d3a4f0789
 

If you have any further queries, do let us know.

---

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members