Evaluates whether health checks are enabled for IPsec-VPN connections.
Scenario
Health checks help you monitor the status of IPsec-VPN connections. We recommend that you enable this feature.
Risk level
Default risk level: low.
You can change the risk level when you apply this rule.
Compliance evaluation logic
- If the health check feature is enabled for each IPsec-VPN connection, the evaluation result is compliant.
- If the health check feature is disabled for an IPsec-VPN connection, the evaluation result is non-compliant. To fix non-compliant resources, see Non-compliance remediation.
Rule details
| Item | Description |
| Rule name | vpn-ipsec-connection-health-check-open |
| Rule ID | vpn-ipsec-connection-health-check-open |
| Tag | IPsec, VPN, and Connection |
| Automatic remediation | Not supported |
| Trigger type | Configuration change |
| Supported resource type | IPsec-VPN connection |
| Input parameter | None |
Non-compliance remediation
Enable the health check feature for the IPsec-VPN connection. For details, see Modify an IPsec-VPN connection.