GCP-CLB-CLB-HTTPS-Only
- naveen
Owned by naveen
Dec 08, 2021
1 min read
Loading data...
Severity : High
Description : For maximum security, CLBs can be configured to only accept HTTPS connections. Standard HTTP connections will be blocked. This should only be done if the client application is configured to query HTTPS directly and not rely on a redirect from HTTP.
Remediation Steps : Remove non-HTTPS listeners from the load balancer.
Blue Hexagon Proprietary