TLS versions earlier than 1.2 use cipher suites with known vulnerabilities. To enhance security, you can configure Bastionhost to disable these outdated cipher suites and enforce TLS 1.2.
Log on to the Bastionhost system. For more information, see Log on to the system.
In the left-side navigation pane, choose System Settings > Data Security Configuration.
On the TLS Settings tab, click the
icon to enable High Security, and then click Save.After you enable High Security, only connections using TLS 1.2 cipher suites are allowed for RDP and SQL Server operations.