💼 7.7 Ensure 'Authentication type' is Set to 'Microsoft Entra ID' Only for Azure VPN Gateway Point-to-Site Configuration (Automated)

• ID: /frameworks/cis-azure-v7.0.0/07/07

Stats

not available

Description

Azure VPN Gateway point-to-site connections authenticate clients with any combination of Azure certificate, RADIUS authentication, and Microsoft Entra ID. The Authentication type setting selects which of these methods the gateway accepts. Prerequisites: Before removing certificate or RADIUS authentication, add Microsoft Entra ID alongside it and deploy the Azure VPN Client profile to every point-to-site user, as the first remediation step describes.

Similar

• Sections
  • /frameworks/cis-azure-v6.0.0/07/09

Similar Sections (Take Policies From)

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 CIS Azure v6.0.0 → 💼 7.9 Ensure 'Authentication type' is Set to 'Azure Active Directory' only for Azure VPN Gateway Point-to-Site Configuration (Automated)			1		no data

Similar Sections (Give Policies To)

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 CIS Azure v6.0.0 → 💼 7.9 Ensure 'Authentication type' is Set to 'Azure Active Directory' only for Azure VPN Gateway Point-to-Site Configuration (Automated)			1		no data

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance

Policies (1)

Policy	Logic Count	Flags	Compliance
🛡️ Azure Virtual Network Gateway point-to-site configuration authentication type is not set to Azure Active Directory🟢⚪		🟢 x2, ⚪ x1	no data