Inspect AFD profile or App Gateway config for minimum protocol version, accepted ciphers, and backend cert validation mode.