Storage Account Management: TLS Cipher Suites and PCI DSS Compliance - Clarification Needed

Question

Storage Account Management: TLS Cipher Suites and PCI DSS Compliance - Clarification Needed

Cmos-9628 0

Problem description

I am seeking clarification regarding the configuration and management of TLS cipher suites for my Azure Storage accounts in relation to PCI DSS requirements. Specifically, I want to understand if I can configure or disable specific cipher suites such as TLS_RSA_WITH_3DES_EDE_CBC_SHA on the Azure Storage front end.

Environment

Storage Account Management in the West Europe region, accessed via private endpoints, with minimum TLS version set to TLS 1.2.

What I've already tried

I have verified the storage account settings to ensure minimum TLS version is TLS 1.2, HTTPS-only access is enabled, and public network access is disabled. I also conducted internal PCI DSS assessments and reviewed Microsoft documentation regarding TLS configuration. However, I found that the Nessus scan still reports support for TLS_RSA_WITH_3DES_EDE_CBC_SHA, despite these settings.

Current status

I am looking for official confirmation from Microsoft support on whether the cipher suite support can be controlled or disabled at the storage account level, and to understand the timeline for removing weak cipher suites like 3DES from the Azure Storage front end.

0 σχόλια

1 απάντηση

Η απάντησή σας

Answer 1

Hello,

Thank you for posting your question!

The question related to Azure is outside the scope of the Greek Microsoft Learn Q&A community. To reach the appropriate audience and increase your chances of receiving a helpful response, I recommend reposting your question in the English Microsoft Q&A forum:

Azure | Microsoft Q&A

By posting in the English forum and selecting the most relevant product tag, your question will be visible to a broader community, including users and experts.

When reposting, consider including any relevant details, error messages, screenshots (if appropriate), and troubleshooting steps you've already tried.

I hope this information helps, and I wish you success in getting your question resolved!