Control: 6.5 Ensure that Network Watcher is 'Enabled'
Description
Enable Network Watcher for Azure subscriptions.
Network diagnostic and visualization tools available with Network Watcher help users understand, diagnose, and gain insights to the network in Azure.
Network Watcher is automatically enabled. When you create or update a virtual network in your subscription, Network Watcher will be enabled automatically in your Virtual Network's region. There is no impact to your resources or associated charge for automatically enabling Network Watcher.
Note: Opting-out of Network Watcher automatic enablement is a permanent change. Once you opt-out you cannot opt-in without contacting support.
Remediation
From Console
- Go to Network Watcher
- Ensure that the
STATUSis set toEnabled
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.cis_v140_6_5Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.cis_v140_6_5 --shareSQL
This control uses a named query:
network_watcher_enabled