Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Severity : null

Description : For maximum security, LBs can be configured to only accept HTTPS connections. Standard HTTP connections will be blocked. This should only be done if the client application is configured to query HTTPS directly and not rely on a redirect from HTTP.

Remediation Steps : Remove non-HTTPS listeners from load balancer.