Skip to content

Commit e8f78ec

Browse files
authored
Update application-gateway-configure-ssl-policy-powershell.md
1 parent a0f5bac commit e8f78ec

File tree

1 file changed

+8
-8
lines changed

1 file changed

+8
-8
lines changed

articles/application-gateway/application-gateway-configure-ssl-policy-powershell.md

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ Learn how to configure TLS/SSL policy versions and cipher suites on Application
2424

2525
## Get available TLS options
2626

27-
The `Get-AzApplicationGatewayAvailableSslOptions` cmdlet provides a listing of available pre-defined policies, available cipher suites, and protocol versions that can be configured. The following example shows an example output from running the cmdlet.
27+
The `Get-AzApplicationGatewayAvailableSslOptions` cmdlet provides a listing of available predefined policies, available cipher suites, and protocol versions that can be configured. The following example shows an example output from running the cmdlet.
2828

2929
> [!IMPORTANT]
3030
> The default TLS policy is set to AppGwSslPolicy20220101 for API versions 2023-02-01 or higher. Visit [TLS policy overview](./application-gateway-ssl-policy-overview.md#default-tls-policy) to know more.
@@ -82,9 +82,9 @@ AvailableProtocols:
8282
TLSv1_3
8383
```
8484

85-
## List pre-defined TLS Policies
85+
## List predefined TLS Policies
8686

87-
Application gateway comes with multiple pre-defined policies that can be used. The `Get-AzApplicationGatewaySslPredefinedPolicy` cmdlet retrieves these policies. Each policy has different protocol versions and cipher suites enabled. These pre-defined policies can be used to quickly configure a TLS policy on your application gateway. By default **AppGwSslPolicy20150501** is selected if no specific TLS policy is defined.
87+
Application gateway comes with multiple predefined policies that can be used. The `Get-AzApplicationGatewaySslPredefinedPolicy` cmdlet retrieves these policies. Each policy has different protocol versions and cipher suites enabled. These predefined policies can be used to quickly configure a TLS policy on your application gateway. By default **AppGwSslPolicy20150501** is selected if no specific TLS policy is defined.
8888

8989
The following output is an example of running `Get-AzApplicationGatewaySslPredefinedPolicy`.
9090

@@ -152,11 +152,11 @@ This illustration further explains the usage of CustomV2 policy with minimum pro
152152

153153
:::image type="content" source="media/application-gateway-configure-ssl-policy-powershell/custom-v2-PS-commands.png" alt-text="Diagram that shows use of ciphersuite parameter for the CustomV2 policy.":::
154154

155-
## Create an application gateway with a pre-defined TLS policy
155+
## Create an application gateway with a predefined TLS policy
156156

157157
When configuring a Predefined TLS policy, you pass the following parameters: PolicyType, PolicyName, and ApplicationGateway. If you attempt to pass other parameters, you get an error when creating or updating the Application Gateway.
158158

159-
The following example creates a new application gateway with a pre-defined TLS policy.
159+
The following example creates a new application gateway with a predefined TLS policy.
160160

161161
```powershell
162162
# Create a resource group
@@ -202,19 +202,19 @@ $rule = New-AzApplicationGatewayRequestRoutingRule -Name rule01 -RuleType Basic
202202
# Define the size of the application gateway
203203
$sku = New-AzApplicationGatewaySku -Name Standard_Small -Tier Standard -Capacity 2
204204
205-
# Configure the TLS policy to use a different pre-defined policy
205+
# Configure the TLS policy to use a different predefined policy
206206
$policy = New-AzApplicationGatewaySslPolicy -PolicyType Predefined -PolicyName AppGwSslPolicy20170401S
207207
208208
# Create the application gateway.
209209
$appgw = New-AzApplicationGateway -Name appgwtest -ResourceGroupName $rg.ResourceGroupName -Location "East US" -BackendAddressPools $pool -BackendHttpSettingsCollection $poolSetting -FrontendIpConfigurations $fipconfig -GatewayIpConfigurations $gipconfig -FrontendPorts $fp -HttpListeners $listener -RequestRoutingRules $rule -Sku $sku -SslCertificates $cert -SslPolicy $policy
210210
```
211211

212-
## Update an existing application gateway with a pre-defined TLS policy
212+
## Update an existing application gateway with a predefined TLS policy
213213

214214
To set a custom TLS policy, pass the following parameters: **PolicyType**, **MinProtocolVersion**, **CipherSuite**, and **ApplicationGateway**. To set a Predefined TLS policy, pass the following parameters: **PolicyType**, **PolicyName**, and **ApplicationGateway**. If you attempt to pass other parameters, you get an error when creating or updating the Application Gateway.
215215

216216
> [!NOTE]
217-
> Using a new Predefined or Customv2 policy enhances SSL security and performance posture of the entire gateway (SSL Policy and SSL Profile). Hence, both old and new policies cannot co-exist. You are required to use any of the older predefined or custom policies across the gateway, in case there are clients requiring older TLS version or ciphers (for example, TLS v1.0).
217+
> Using a new Predefined or Customv2 policy enhances SSL security and performance posture of the entire gateway (SSL Policy and SSL Profile). Hence, both old and new policies cannot coexist. You are required to use any of the older predefined or custom policies across the gateway, in case there are clients requiring older TLS version or ciphers (for example, TLS v1.0).
218218
219219
In the following example, there are code samples for both Custom Policy and Predefined Policy. Uncomment the policy you want to use.
220220

0 commit comments

Comments
 (0)