We are about to go live with an Azure Website and, as a precaution, did a security scan on the IP address that has been allocated to us.
There were a number of low severity warnings listed which we're not too worried about, however the scan did flag that something appears to be listening on port 454 and 455, and supports TLS1.0.
RESULTS:
Available non CBC cipher Server's choice SSL version
RC4-SHA DES-CBC3-SHA TLSv1
Does anyone know what this is? I can't find it obviously listed anywhere. If it's not necessary, can I switch it off? And if it is necessary, can I set it to require a more secure protocol?
We're hosted in the "Australia East" datacentre, in case that's relevant.
UPDATE 1: I have deployed a C# MVC web app using .NET 4.5 and it currently includes 1 WebJob. I've bound 1 SHA256 SSL certificate using SNI SSL.
I have seen the "Set up deployment from source control" link on the dashboard, but haven't used it. We currently deploy using our on TeamCity instance via Web Deploy.