| JSON |
{
"properties": {
"displayName": "[Deprecated]: Audit Windows web servers that are not using secure communication protocols",
"policyType": "BuiltIn",
"description": "This initiative deploys the policy requirements and audits Windows web servers that are not using secure communication protocols (TLS 1.1 or TLS 1.2). For more information on Guest Configuration policies, please visit https://aka.ms/gcpol",
"metadata": {
"version": "1.0.0-deprecated",
"category": "Guest Configuration",
"deprecated": true
},
"parameters": {
"MinimumTLSVersion": {
"type": "String",
"metadata": {
"displayName": "Minimum TLS version",
"description": "The minimum TLS protocol version that should be enabled. Windows web servers with lower TLS versions will be marked as non-compliant."
},
"allowedValues": [
"1.1",
"1.2"
],
"defaultValue": "1.1"
}
},
"policyDefinitions": [
{
"policyDefinitionReferenceId": "Deploy_WindowsTLS",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b2fc8f91-866d-4434-9089-5ebfe38d6fd8",
"parameters": {
"MinimumTLSVersion": {
"value": "[parameters('MinimumTLSVersion')]"
}
}
},
{
"policyDefinitionReferenceId": "Audit_WindowsTLS",
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/60ffe3e2-4604-4460-8f22-0f1da058266c"
}
]
},
"id": "/providers/Microsoft.Authorization/policySetDefinitions/8bc55e6b-e9d5-4266-8dac-f688d151ec9c",
"type": "Microsoft.Authorization/policySetDefinitions",
"name": "8bc55e6b-e9d5-4266-8dac-f688d151ec9c"
}
|