{
    "api_version": "1",
    "kind": "dse_post",
    "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260917-147-check-deployment-eligibility-before-proposing-a-high-bandwidth-vpn-gateway-upgrade/",
    "item": {
        "id": "https://update.dsesecurity.com/updates/dse-20260917-147-check-deployment-eligibility-before-proposing-a-high-bandwidth-vpn-gateway-upgrade/",
        "slug": "dse-20260917-147-check-deployment-eligibility-before-proposing-a-high-bandwidth-vpn-gateway-upgrade",
        "url": "https://update.dsesecurity.com/updates/dse-20260917-147-check-deployment-eligibility-before-proposing-a-high-bandwidth-vpn-gateway-upgrade/",
        "alternate_urls": {
            "markdown": "https://update.dsesecurity.com/updates/dse-20260917-147-check-deployment-eligibility-before-proposing-a-high-bandwidth-vpn-gateway-upgrade.md",
            "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260917-147-check-deployment-eligibility-before-proposing-a-high-bandwidth-vpn-gateway-upgrade/"
        },
        "title": "Check deployment eligibility before proposing a High Bandwidth VPN gateway upgrade",
        "summary": "Review the documented migration and connectivity boundaries of Advanced Connectivity.",
        "format": {
            "slug": "guide",
            "name": "Guide"
        },
        "priority": {
            "slug": "info",
            "name": "Information"
        },
        "featured": false,
        "image": {
            "theme": "network-infrastructure",
            "label": "Networks & infrastructure",
            "alt": "Resilient network core with engineered blue and gold data paths.",
            "card_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-card.webp?v=1.8.20",
            "hero_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-hero.webp?v=1.8.20",
            "social_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20",
            "width": 2400,
            "height": 1350
        },
        "topics": [
            {
                "slug": "cybersecurity",
                "name": "Cybersecurity",
                "url": "https://update.dsesecurity.com/topic/cybersecurity/"
            },
            {
                "slug": "networks-infrastructure",
                "name": "Networks & Infrastructure",
                "url": "https://update.dsesecurity.com/topic/networks-infrastructure/"
            }
        ],
        "author": {
            "name": "DSE Security Editorial Team",
            "url": "https://update.dsesecurity.com/#editorial-team",
            "type": "Organization"
        },
        "publisher": {
            "name": "Detection Systems & Engineering",
            "url": "https://dsesecurity.com/"
        },
        "published_at": "2026-09-17T16:32:33+00:00",
        "modified_at": "2026-09-17T16:42:36+00:00",
        "reviewed_on": "2026-09-17",
        "reading_minutes": 1,
        "word_count": 210,
        "potentially_affected": "Use this review when assessing whether Advanced Connectivity fits an existing network. Identify current gateway functions, ExpressRoute configuration and target region. Read the latest regional and feature limitations directly before approving a design; this article does not establish eligibility for a particular deployment.",
        "dse_recommendation": "DSE recommends a requirement matrix that marks each current dependency against the documented limitations.",
        "primary_source": {
            "name": "Create site-to-site high bandwidth tunnels in the Azure portal - Azure VPN Gateway | Microsoft Learn",
            "url": "https://learn.microsoft.com/en-us/azure/vpn-gateway/site-to-site-high-bandwidth-tunnel",
            "published_on": null,
            "authority": "Microsoft Learn"
        },
        "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
        "usage_info": "https://update.dsesecurity.com/usage/",
        "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
        "content_html": "<h2>Source facts</h2>\n<p>Microsoft&#8217;s High Bandwidth tunnel guidance lists no migration path from existing gateways. It describes the capability as operating over ExpressRoute private peering and requires FastPath on the ExpressRoute connection. The documented limitations also exclude point-to-site connections, APIPA BGP addresses, NAT, IPv6 and Virtual WAN interoperability. <a href=\"https://learn.microsoft.com/en-us/azure/vpn-gateway/site-to-site-high-bandwidth-tunnel\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Learn</a>.</p>\n<h2>Applicability</h2>\n<p>Use this review when assessing whether Advanced Connectivity fits an existing network. Identify current gateway functions, ExpressRoute configuration and target region. Read the latest regional and feature limitations directly before approving a design; this article does not establish eligibility for a particular deployment.</p>\n<h2>DSE recommendation</h2>\n<p>DSE recommends a requirement matrix that marks each current dependency against the documented limitations. Treat the absence of a migration path as a planning issue requiring an explicit replacement design. Assign owners for application continuity, address changes and recovery, and reject a simple in-place-upgrade assumption until the complete deployment plan is reviewed.</p>\n<h2>Verification</h2>\n<p>Validate the proposed configuration in an approved isolated environment that meets the documented prerequisites. Check each required tunnel, route and application path, and record any unsupported dependency as an unresolved design issue. Keep observed throughput or connectivity separate from proof that all former gateway functions have an accepted replacement.</p>\n<h2>Official references</h2>\n<p><a href=\"https://learn.microsoft.com/en-us/azure/vpn-gateway/site-to-site-high-bandwidth-tunnel\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Learn: Create site-to-site high bandwidth tunnels in the Azure portal</a>.</p>",
        "content_text": "Source facts\nMicrosoft’s High Bandwidth tunnel guidance lists no migration path from existing gateways. It describes the capability as operating over ExpressRoute private peering and requires FastPath on the ExpressRoute connection. The documented limitations also exclude point-to-site connections, APIPA BGP addresses, NAT, IPv6 and Virtual WAN interoperability. Microsoft Learn.\nApplicability\nUse this review when assessing whether Advanced Connectivity fits an existing network. Identify current gateway functions, ExpressRoute configuration and target region. Read the latest regional and feature limitations directly before approving a design; this article does not establish eligibility for a particular deployment.\nDSE recommendation\nDSE recommends a requirement matrix that marks each current dependency against the documented limitations. Treat the absence of a migration path as a planning issue requiring an explicit replacement design. Assign owners for application continuity, address changes and recovery, and reject a simple in-place-upgrade assumption until the complete deployment plan is reviewed.\nVerification\nValidate the proposed configuration in an approved isolated environment that meets the documented prerequisites. Check each required tunnel, route and application path, and record any unsupported dependency as an unresolved design issue. Keep observed throughput or connectivity separate from proof that all former gateway functions have an accepted replacement.\nOfficial references\nMicrosoft Learn: Create site-to-site high bandwidth tunnels in the Azure portal.",
        "content_markdown": "## Source facts\n\nMicrosoft’s High Bandwidth tunnel guidance lists no migration path from existing gateways. It describes the capability as operating over ExpressRoute private peering and requires FastPath on the ExpressRoute connection. The documented limitations also exclude point-to-site connections, APIPA BGP addresses, NAT, IPv6 and Virtual WAN interoperability. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/vpn-gateway/site-to-site-high-bandwidth-tunnel).\n\n## Applicability\n\nUse this review when assessing whether Advanced Connectivity fits an existing network. Identify current gateway functions, ExpressRoute configuration and target region. Read the latest regional and feature limitations directly before approving a design; this article does not establish eligibility for a particular deployment.\n\n## DSE recommendation\n\nDSE recommends a requirement matrix that marks each current dependency against the documented limitations. Treat the absence of a migration path as a planning issue requiring an explicit replacement design. Assign owners for application continuity, address changes and recovery, and reject a simple in-place-upgrade assumption until the complete deployment plan is reviewed.\n\n## Verification\n\nValidate the proposed configuration in an approved isolated environment that meets the documented prerequisites. Check each required tunnel, route and application path, and record any unsupported dependency as an unresolved design issue. Keep observed throughput or connectivity separate from proof that all former gateway functions have an accepted replacement.\n\n## Official references\n\n[Microsoft Learn: Create site-to-site high bandwidth tunnels in the Azure portal](https://learn.microsoft.com/en-us/azure/vpn-gateway/site-to-site-high-bandwidth-tunnel)."
    },
    "json_ld": {
        "@context": "https://schema.org",
        "@graph": [
            {
                "@type": "Organization",
                "@id": "https://dsesecurity.com/#organization",
                "name": "Detection Systems & Engineering",
                "alternateName": "DSE Security",
                "url": "https://dsesecurity.com/",
                "logo": {
                    "@type": "ImageObject",
                    "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20"
                }
            },
            {
                "@type": "Organization",
                "@id": "https://update.dsesecurity.com/#editorial-team",
                "name": "DSE Security Editorial Team",
                "url": "https://update.dsesecurity.com/",
                "parentOrganization": {
                    "@id": "https://dsesecurity.com/#organization"
                }
            },
            {
                "@type": "WebSite",
                "@id": "https://update.dsesecurity.com/#website",
                "name": "DSE Updates",
                "alternateName": "DSE Security Knowledge Hub",
                "url": "https://update.dsesecurity.com/",
                "inLanguage": "en-US",
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "potentialAction": {
                    "@type": "SearchAction",
                    "target": {
                        "@type": "EntryPoint",
                        "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}"
                    },
                    "query-input": "required name=search_term_string"
                }
            },
            {
                "@type": "WebPage",
                "@id": "https://update.dsesecurity.com/updates/dse-20260917-147-check-deployment-eligibility-before-proposing-a-high-bandwidth-vpn-gateway-upgrade/",
                "url": "https://update.dsesecurity.com/updates/dse-20260917-147-check-deployment-eligibility-before-proposing-a-high-bandwidth-vpn-gateway-upgrade/",
                "isPartOf": {
                    "@id": "https://update.dsesecurity.com/#website"
                },
                "lastReviewed": "2026-09-17"
            },
            {
                "@type": "BreadcrumbList",
                "@id": "https://update.dsesecurity.com/updates/dse-20260917-147-check-deployment-eligibility-before-proposing-a-high-bandwidth-vpn-gateway-upgrade/#breadcrumbs",
                "itemListElement": [
                    {
                        "@type": "ListItem",
                        "position": 1,
                        "name": "DSE Updates",
                        "item": "https://update.dsesecurity.com/"
                    },
                    {
                        "@type": "ListItem",
                        "position": 2,
                        "name": "Check deployment eligibility before proposing a High Bandwidth VPN gateway upgrade",
                        "item": "https://update.dsesecurity.com/updates/dse-20260917-147-check-deployment-eligibility-before-proposing-a-high-bandwidth-vpn-gateway-upgrade/"
                    }
                ]
            },
            {
                "@type": [
                    "Article",
                    "TechArticle"
                ],
                "@id": "https://update.dsesecurity.com/updates/dse-20260917-147-check-deployment-eligibility-before-proposing-a-high-bandwidth-vpn-gateway-upgrade/#article",
                "identifier": "https://update.dsesecurity.com/updates/dse-20260917-147-check-deployment-eligibility-before-proposing-a-high-bandwidth-vpn-gateway-upgrade/",
                "url": "https://update.dsesecurity.com/updates/dse-20260917-147-check-deployment-eligibility-before-proposing-a-high-bandwidth-vpn-gateway-upgrade/",
                "headline": "Check deployment eligibility before proposing a High Bandwidth VPN gateway upgrade",
                "description": "Review the documented migration and connectivity boundaries of Advanced Connectivity.",
                "abstract": "Review the documented migration and connectivity boundaries of Advanced Connectivity.",
                "articleBody": "Source facts\nMicrosoft’s High Bandwidth tunnel guidance lists no migration path from existing gateways. It describes the capability as operating over ExpressRoute private peering and requires FastPath on the ExpressRoute connection. The documented limitations also exclude point-to-site connections, APIPA BGP addresses, NAT, IPv6 and Virtual WAN interoperability. Microsoft Learn.\nApplicability\nUse this review when assessing whether Advanced Connectivity fits an existing network. Identify current gateway functions, ExpressRoute configuration and target region. Read the latest regional and feature limitations directly before approving a design; this article does not establish eligibility for a particular deployment.\nDSE recommendation\nDSE recommends a requirement matrix that marks each current dependency against the documented limitations. Treat the absence of a migration path as a planning issue requiring an explicit replacement design. Assign owners for application continuity, address changes and recovery, and reject a simple in-place-upgrade assumption until the complete deployment plan is reviewed.\nVerification\nValidate the proposed configuration in an approved isolated environment that meets the documented prerequisites. Check each required tunnel, route and application path, and record any unsupported dependency as an unresolved design issue. Keep observed throughput or connectivity separate from proof that all former gateway functions have an accepted replacement.\nOfficial references\nMicrosoft Learn: Create site-to-site high bandwidth tunnels in the Azure portal.",
                "datePublished": "2026-09-17T16:32:33+00:00",
                "dateModified": "2026-09-17T16:42:36+00:00",
                "mainEntityOfPage": {
                    "@id": "https://update.dsesecurity.com/updates/dse-20260917-147-check-deployment-eligibility-before-proposing-a-high-bandwidth-vpn-gateway-upgrade/"
                },
                "inLanguage": "en-US",
                "isAccessibleForFree": true,
                "author": {
                    "@type": "Organization",
                    "name": "DSE Security Editorial Team",
                    "url": "https://update.dsesecurity.com/#editorial-team"
                },
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "image": {
                    "@type": "ImageObject",
                    "@id": "https://update.dsesecurity.com/updates/dse-20260917-147-check-deployment-eligibility-before-proposing-a-high-bandwidth-vpn-gateway-upgrade/#primaryimage",
                    "url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20",
                    "contentUrl": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20",
                    "width": 1200,
                    "height": 630,
                    "caption": "Check deployment eligibility before proposing a High Bandwidth VPN gateway upgrade"
                },
                "articleSection": [
                    "Cybersecurity",
                    "Networks & Infrastructure"
                ],
                "keywords": [
                    "Cybersecurity",
                    "Networks & Infrastructure",
                    "Guide",
                    "Information priority"
                ],
                "genre": "Guide",
                "about": [
                    {
                        "@type": "Thing",
                        "name": "Cybersecurity",
                        "url": "https://update.dsesecurity.com/topic/cybersecurity/"
                    },
                    {
                        "@type": "Thing",
                        "name": "Networks & Infrastructure",
                        "url": "https://update.dsesecurity.com/topic/networks-infrastructure/"
                    }
                ],
                "wordCount": 210,
                "timeRequired": "PT1M",
                "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
                "usageInfo": "https://update.dsesecurity.com/usage/",
                "copyrightHolder": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
                "citation": {
                    "@type": "CreativeWork",
                    "name": "Create site-to-site high bandwidth tunnels in the Azure portal - Azure VPN Gateway | Microsoft Learn",
                    "url": "https://learn.microsoft.com/en-us/azure/vpn-gateway/site-to-site-high-bandwidth-tunnel"
                }
            }
        ]
    }
}