Hi All,
Recently I have checked the Security Command Center of My Apigee GCP project. I can see some vulnerability observations are reported there. In that something weird reporting is related to GCP load balancer's SSL. Please find the same thing below.
Please share your insights on this issue and recommendations to fix this Weak SSL Policy.
@dchiesa1
| severity | finding_class | parent_display_name | category | type | display_name | description |
| MEDIUM | MISCONFIGURATION | Security Health Analytics | WEAK_SSL_POLICY | google.compute.TargetHttpsProxy | apigee-proxy-url-map-2-target-proxy | HTTPS and SSL Proxy load balancers use SSL policies to determine the protocol and cipher suites used in the TLS connections established between users and the Internet. These connections encrypt sensitive data to prevent malicious eavesdroppers from accessing it. A weak SSL policy permits clients using outdated versions of TLS to connect with a less secure cipher suite or protocol. For a list of recommended and outdated cipher suites, see https://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml#tls-parameters-4. |
LinkedIn
Twitter
