Use secure protocols

Security · API Management · Azure.APIM.Ciphers

API Management should not accept weak or deprecated ciphers.

Description

API Management provides support for weak or deprecated ciphers. These older versions are provided for compatibility but are not consider secure. These Ciphers are enabled by default and need to be set to False.

Recommendation

Consider disabling weak or deprecated ciphers.

Links

• Data encryption in Azure
• Manage protocols and ciphers in Azure API Management
• Cryptographic Recommendations

---

Last update: 2022-01-18