AZ503393 - Generally Available: Backend TLS validation controls in Azure Application Gateway

Azure Updates

Discussionpowered by zap.ms

Published

Sep 15, 2025

Status

Launched

Timeline

  • September 2025
    General Availability

Product

Application Gateway

Tag

Services
Features
Management

Category

Networking
Security

Description

Azure Application Gateway V2 announces general availability of customer-controlled backend TLS validations. When the HTTPS protocol is selected in the Backend Settings of Azure Application Gateway, by default, it performs all validations in the TLS handshake before successfully establishing a connection with a backend server. Azure Application Gateway now supports the following configurable options, giving customers greater flexibility in managing backend TLS behavior across diverse environments. 
  • Enable or disable Certificate chain and expiry verification 
  • Enable or disable SNI verification 

With these new settings, customers can customize TLS validations to align with their infrastructure needs.