Question

Your company runs a site-to-site VPN connection between an on-premises datacenter and an Azure VNet through a VpnGw2 gateway. The operations team reports intermittent slowdowns and wants proactive alerting when the tunnel approaches its throughput ceiling. You need to configure alerting on the actual data traffic passing through the VPN gateway with the least administrative effort. Which approach should you use?

Accepted Answer

Create a metric alert in Azure Monitor on the VPN gateway's 'Tunnel Egress/Ingress Bytes' (Gateway P2S/S2S Bandwidth) metrics.

Answer

Enable NSG flow logs on the GatewaySubnet and analyze traffic volume in Traffic Analytics.

Answer

Run Network Watcher Connection Monitor between an on-premises host and an Azure VM to measure latency.

Answer

Configure a diagnostic setting to send IKEDiagnosticLog entries to a Log Analytics workspace and create a log query alert.