Back to All Checks
Medium EC2 Regional

EC2 VPN connections should use IKEv2 protocol

Description

Flags AWS Site-to-Site VPN connections whose tunnels do not support IKEv2. IKEv1 is the legacy keying protocol; tunnels should support IKEv2 at minimum.

Remediation

Modify each VPN connection's tunnel options to include ikev2 in IkeVersions.

Steps

  1. Open the Amazon VPC console and choose Site-to-Site VPN connections.
  2. Select the affected VPN connection and choose Modify VPN tunnel options.
  3. Under IKE versions, ensure ikev2 is selected for every tunnel.
  4. Save the changes.
Start Your Free Security Check