---
title: Network Watcher should be enabled in every region that has a virtual network
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: >-
  Docs > Datadog Security > OOTB Rules > Network Watcher should be enabled in
  every region that has a virtual network
---

> For the complete documentation index, see [llms.txt](https://docs.datadoghq.com/llms.txt).

# Network Watcher should be enabled in every region that has a virtual network
 
## Description{% #description %}

Network Watcher provides the flow logs, connection troubleshooting, and topology views needed to investigate network activity, but only in regions where it is enabled. Every region where a subscription has a virtual network should have a Network Watcher in the `Succeeded` provisioning state. Subscriptions without virtual networks pass.

## Remediation{% #remediation %}

Enable Network Watcher in each region that has a virtual network. See [Enable or disable Azure Network Watcher](https://learn.microsoft.com/en-us/azure/network-watcher/network-watcher-create).

## References{% #references %}

- [Enable or disable Azure Network Watcher](https://learn.microsoft.com/en-us/azure/network-watcher/network-watcher-create)
- [CIS Microsoft Azure Foundations Benchmark](https://www.cisecurity.org/benchmark/azure)