End of support for TLS 1.0 and 1.1 in Microsoft Cloud App Security

Microsoft is moving all its online services to Transport Layer Security (TLS) 1.2+ to provide best-in-class encryption, and to ensure our service is more secure by default, including Microsoft Cloud App Security.

 

How does this affect me?

As of September 8, 2019 Microsoft Cloud App Security will no longer support TLS 1.0 and 1.1. This means that any connection using these protocols will no longer work as expected, and no support will be provided.

 

What do I need to do to prepare for this change?

You should ensure that all client-server and browser-server combinations use TLS 1.2 (or a later version), to maintain the connection to Microsoft Cloud App Security.

Components that may be affected by this change include:

 

• SIEM Agent – Versions older than 0.111.126 will not be able to establish a connection to Microsoft Cloud App Security. If you are using an older version, you need to update by following the instructions in our SIEM integration documentation.


• Microsoft Cloud App Security API – Custom applications and code that are utilizing the Microsoft Cloud App Security API must support TLS 1.2 to continue functioning. If you’re not sure whether your application supports TLS 1.2 you can test it by authenticating to our dedicated API endpoint here https://tlsv12.portal-rs.cloudappsecurity.com


• Apps configured with Conditional Access App Control – If you are using Conditional Access App Control for any web or native client applications, you need to verify that these applications support TLS 1.2, or access to these apps and subsequently the relevant controls will no longer work.


• Log collector – versions older than 0.111.127 will not be able to establish a connection to Microsoft Cloud App Security. If you are using an older version, you need to update by following the instructions in Microsoft Cloud APp Security log collector documentation.

 

Where possible, Microsoft recommends that you remove all TLS 1.0/1.1 dependencies in your environment and that you disable TLS 1.0/1.1 at the operating system level.

 

Begin your migration to TLS 1.2 today.

 

-Microsoft Cloud App Security team

Source: EM+S Blog Feed