Azure Updates 01/11/2025

Microsoft provides a page listing all the planned updates for Azure related resources - Azure Updates. There are filters for different Azure resource types, status, etc. so you can filter the list to find what is most relevant and important to you.

I plan to review this page regularly and post about a few topics that are relevant to my interests and specialties.

Retirement: TLS 1.0 and 1.1

There has been a moderate paced transition over the past months to require TLS 1.2 to connect to all Azure resources.

The final date to have all resources transitioned is August 31, 2025. This is important to update to make sure any process that accesses Azure resources and services continue to function.

You can find a list of remaining Azure services that support TLS 1.0 and 1.1 at this blog post.

Azure WAF Javascript Challenge Action

A feature currently in preview is a JavaScript challenge on Azure Web Application Firewall. A Web Application Firewall can be attached to Azure Front Door or Application Gateway.

The JavaScript challenge is part of the Bot Manager rulesets which, as it implies, protects against malicious bot traffic.When activated it is an additional action, along with the existing Block, Allow, and Log, that will trigger a non-interactive challenge in the browser.

If this challenge fails then the traffic will be blocked. A cookie will be created to prevent users needing to experience this challenge again for a configurable amount of time.

For additional details, check out this blog post and the official documentation.