- Ensure ‘HTTPS Only’ is Enabled for Azure App Services
- Ensure App Service Authentication is set up for apps in Azure App Service
- Ensure ‘FTP State’ is Set to ‘FTPS Only’ or ‘Disabled’ for Azure App Services
- Ensure Web App is using the latest version of TLS encryption
- Ensure the web app has 'Client Certificates (Incoming client certificates)' set to 'On'