Azure Compliance ControlsAzure VPN Gateway
Virtual network gateways should use standard SKUs as a minimum
Virtual network gateways should use standard SKUs as a minimum. The use of Basic or Free SKUs in Azure has significant limitations in what can be monitored and what support can be realized from Microsoft. Basic/Free SKUs should never be used for production workloads.
What this control checks
VPN gateways must not use the Basic SKU tier
Framework mappings
The clauses this control is mapped to in each framework.
- 5.5 Ensure that SKU Basic/Consumption is not used on artifacts that need to be monitored (Particularly for Production Workloads)
- 5.5 Ensure that SKU Basic/Consumption is not used on artifacts that need to be monitored (Particularly for Production Workloads)
- 6.5 Ensure that SKU Basic/Consumption is not used on artifacts that need to be monitored (Particularly for Production Workloads)
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
network_virtual_network_gateway_no_basic_sku - Powerpipe Control:
azure_compliance.control.network_virtual_network_gateway_no_basic_sku - Azure Policy Definition:
e345b6c3-24bd-4c93-9bbb-7e5e49a17b78
Last reviewed: 2026-10-14