Azure Compliance ControlsAzure Application Gateway
Application gateways should have the SSL policy's 'Min protocol version' set to 'TLSv1_2' or higher
Checks that Azure Application Gateway defines secure protocols for in transit communication. The check applies to Azure Application Gateway resources and inspects the protocol configuration that governs secure in transit communication.
What this control checks
Application gateways must use an SSL policy with a minimum TLS version of TLSv1_2 or higher
Framework mappings
The clauses this control is mapped to in each framework.
- 7.12 Ensure the SSL policy's 'Min protocol version' is set to 'TLSv1_2' or higher on Azure Application Gateway
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
application_gateway_min_tls_1_2 - Checkov Check:
CKV_AZURE_218 - Powerpipe Control:
azure_compliance.control.application_gateway_min_tls_1_2
Last reviewed: 2026-10-10