Dedicated private connections may carry traffic without encryption, and VPN tunnels may be negotiated with deprecated protocol versions or weak key-exchange groups. Traffic traversing the connection can be read or modified by an entity with access to the transmission path, impacting the confidentiality and integrity of data.
Hybrid Connection Traffic is Unencrypted or Weakly Encrypted
CCC.VPC.TH10
Related Capabilities
| ID | Title | Description |
|---|---|---|
| CCC.VPC.CP10 | Connectivity Options - Private Connection | The service can be configured with a dedicated, private, high-speed connection between on-premises networks and the virtual network that does not traverse the public internet. |
| CCC.VPC.CP13 | Connectivity Options - Site-to-site VPN | The service can establish an encrypted site-to-site VPN connection over the public internet between the virtual network and an on-premises network. |
Related Controls
| ID | Title | Description |
|---|---|---|
| CCC.VPC.CN11 | Enforce Strong Encryption on Hybrid Connections | Ensure that traffic between the virtual network and on-premises networks cannot be read or modified in transit. |