Azure SQL Managed Instance Tls Version Check

As per the Azure portal, all managed instances are configured to use TLS 1.2. However, we received an email stating, “Microsoft has identified the following resources that have active TLS 1.0/1.1 traffic to Azure SQL Managed Instance.” To investigate, we executed queries in Azure CLI and Azure Monitor, but were unable to identify any resources using TLS 1.0 or 1.1. Please advise on how to accurately check which resources are using TLS 1.2 or lower.

az sql mi show –name –resource-group –query minimalTlsVersion — Received output as Tls1.2

AzureDiagnostics

| where ResourceType == “MANAGEDINSTANCES”

| where isnotempty(tlsVersion_s)

| where tlsVersion_s == “TLS1_0” or tlsVersion_s == “TLS1_1”

| project TimeGenerated, client_ip_s, tlsVersion_s, database_name_s, application_name_s

| sort by TimeGenerated desc — No Result

Read more here: Source link