Application gateways should have 'HTTP2' set to 'Enabled'
HTTP/2 is a major revision of the HTTP network protocol and offers significant performance improvements over HTTP/1.1. Enabling HTTP/2 on Application Gateway can improve application performance and reduce latency.
HTTP/2 is a major revision of the HTTP network protocol and offers significant performance improvements over HTTP/1.1. Enabling HTTP/2 on Application Gateway can improve application performance and reduce latency.
What this control checks
Application gateways should have 'HTTP2' set to 'Enabled'
Audit evidence
Evidence that deployed resources meet this control: Prowler check network_application_gateway_http2_enabled (prowler azure --checks network_application_gateway_http2_enabled); PowerPipe control azure_compliance.control.application_gateway_http2_enabled.
Framework-specific interpretation
CIS Azure Benchmark v5.0.0: Mapped to 7.13 (Ensure 'HTTP2' is set to 'Enabled' on Azure Application Gateway).
Framework mappings
The clauses this control is mapped to in each framework.
- 7.13 Ensure 'HTTP2' is set to 'Enabled' on Azure Application Gateway
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
application_gateway_http2_enabled - Powerpipe Control:
azure_compliance.control.application_gateway_http2_enabled - Prowler Check:
network_application_gateway_http2_enabled
Last reviewed: 2026-10-10