MEDIUM
Source
CloudSploit
ID
vpn-gateway-entra-id-authentication

VPN Gateway Entra ID Authentication

Ensures that VPN gateway point-to-site configuration uses Entra ID authentication only.

Entra ID authentication provides centralized identity management and conditional access for point-to-site VPN users. Allowing certificate or RADIUS authentication relies on static credentials that are harder to rotate, revoke and audit.

In the point-to-site configuration of the VPN gateway, set the authentication type to Entra ID only and remove Azure certificate and RADIUS authentication.