AzInitiativeAdvertizer

last sync: 2021-Sep-17 15:46:38 UTC

Azure Policy Initiative

[Deprecated]: Audit Windows web servers that are not using secure communication protocols

Name [Deprecated]: Audit Windows web servers that are not using secure communication protocols
Azure Portal

Id 8bc55e6b-e9d5-4266-8dac-f688d151ec9c

Version 1.0.0-deprecated
details on versioning

Category Guest Configuration
Microsoft docs

Description This initiative deploys the policy requirements and audits Windows web servers that are not using secure communication protocols (TLS 1.1 or TLS 1.2). For more information on Guest Configuration policies, please visit https://aka.ms/gcpol

Type BuiltIn

Deprecated True

Preview False

History

Date/Time (UTC ymd) (i)	Changes
2020-09-09 11:24:08	Name change: 'Audit Windows web servers that are not using secure communication protocols' to '[Deprecated]: Audit Windows web servers that are not using secure communication protocols'

Policy count Total Policies: 2
Builtin Policies: 2
Static Policies: 0

Policy used

Policy DisplayName	Policy Id	Category	Effect	State
[Deprecated]: Deploy prerequisites to audit Windows web servers that are not using secure communication protocols	b2fc8f91-866d-4434-9089-5ebfe38d6fd8	Guest Configuration	Fixed: deployIfNotExists	Deprecated
[Deprecated]: Show audit results from Windows web servers that are not using secure communication protocols	60ffe3e2-4604-4460-8f22-0f1da058266c	Guest Configuration	Fixed: auditIfNotExists	Deprecated

JSON

{
  "displayName": "[Deprecated]: Audit Windows web servers that are not using secure communication protocols",
  "policyType": "BuiltIn",
  "description": "This initiative deploys the policy requirements and audits Windows web servers that are not using secure communication protocols (TLS 1.1 or TLS 1.2). For more information on Guest Configuration policies, please visit https://aka.ms/gcpol",
  "metadata": {
    "version": "1.0.0-deprecated",
    "category": "Guest Configuration",
    "deprecated": true
  },
  "parameters": {
    "MinimumTLSVersion": {
      "type": "String",
      "metadata": {
        "displayName": "Minimum TLS version",
        "description": "The minimum TLS protocol version that should be enabled. Windows web servers with lower TLS versions will be marked as non-compliant."
      },
      "allowedValues": [
        "1.1",
        "1.2"
      ],
      "defaultValue": "1.1"
    }
  },
  "policyDefinitions": [
    {
      "policyDefinitionReferenceId": "Deploy_WindowsTLS",
      "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b2fc8f91-866d-4434-9089-5ebfe38d6fd8",
      "parameters": {
        "MinimumTLSVersion": {
          "value": "[parameters('MinimumTLSVersion')]"
        }
      }
    },
    {
      "policyDefinitionReferenceId": "Audit_WindowsTLS",
      "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/60ffe3e2-4604-4460-8f22-0f1da058266c"
    }
  ]
}