The IPsec VPN Gateway must use anti-replay mechanisms for security associations.

Anti-replay is an IPsec security mechanism at a packet level, which helps to avoid unwanted users from intercepting and modifying an ESP packet.

Verify the IPsec VPN Gateway uses anti-replay mechanisms for security associations.

If the IPsec VPN Gateway does not use anti-replay mechanisms for security associations, this is a finding.

Configure the IPsec VPN Gateway to use anti-replay mechanisms for security associations.