{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260917-185-include-the-virtual-wan-global-p2s-profile-in-remote-user-recovery-testing/", "item": { "id": "https://update.dsesecurity.com/updates/dse-20260917-185-include-the-virtual-wan-global-p2s-profile-in-remote-user-recovery-testing/", "slug": "dse-20260917-185-include-the-virtual-wan-global-p2s-profile-in-remote-user-recovery-testing", "url": "https://update.dsesecurity.com/updates/dse-20260917-185-include-the-virtual-wan-global-p2s-profile-in-remote-user-recovery-testing/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/dse-20260917-185-include-the-virtual-wan-global-p2s-profile-in-remote-user-recovery-testing.md", "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260917-185-include-the-virtual-wan-global-p2s-profile-in-remote-user-recovery-testing/" }, "title": "Include the Virtual WAN global P2S profile in remote-user recovery testing", "summary": "Verify the endpoint choices available to the actual remote client.", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "continuity-recovery", "label": "Continuity & recovery", "alt": "Paired infrastructure paths converging on a stable recovered service.", "card_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "cybersecurity", "name": "Cybersecurity", "url": "https://update.dsesecurity.com/topic/cybersecurity/" }, { "slug": "networks-infrastructure", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-09-17T16:31:55+00:00", "modified_at": "2026-09-17T16:46:29+00:00", "reviewed_on": "2026-09-17", "reading_minutes": 2, "word_count": 227, "potentially_affected": "Use this review for a remote-access recovery design with multiple P2S hubs. Identify the profile actually installed on the client, listed endpoints, intended applications and the user's access path. Keep the design's expected behavior separate from an observed recovery result.", "dse_recommendation": "DSE recommends including profile distribution and client configuration in the recovery plan.", "primary_source": { "name": "Disaster recovery design for Azure Virtual WAN | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/virtual-wan/disaster-recovery-design", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts

\n

Microsoft’s Virtual WAN recovery guidance describes a global profile listing point-to-site endpoints when multiple hubs have P2S gateways. Devices using that profile can connect through an available hub, with Virtual WAN’s traffic manager selecting the best hub for remote-user connectivity. The guidance separately identifies redundancy of the user’s access network as a recovery consideration. Microsoft Learn.

\n

Applicability

\n

Use this review for a remote-access recovery design with multiple P2S hubs. Identify the profile actually installed on the client, listed endpoints, intended applications and the user’s access path. Keep the design’s expected behavior separate from an observed recovery result.

\n

DSE recommendation

\n

DSE recommends including profile distribution and client configuration in the recovery plan. Ask the remote-access owner to define which hubs and applications a representative user must reach during an outage. Identify dependencies that remain outside the Azure hubs, including the user’s connection. Preserve the approved profile and instructions for returning to normal operation.

\n

Verification

\n

In an authorized rehearsal, confirm the client has the intended global profile and can reach the approved application through the available recovery endpoint. Record the selected hub, connection sequence and actual interruption. Test restoration separately. Do not declare remote access resilient solely because two hubs exist; retain evidence from the client and application path that users will rely on.

\n

Official references

\n

Microsoft Learn: Disaster recovery design for Azure Virtual WAN.

", "content_text": "Source facts\nMicrosoft’s Virtual WAN recovery guidance describes a global profile listing point-to-site endpoints when multiple hubs have P2S gateways. Devices using that profile can connect through an available hub, with Virtual WAN’s traffic manager selecting the best hub for remote-user connectivity. The guidance separately identifies redundancy of the user’s access network as a recovery consideration. Microsoft Learn.\nApplicability\nUse this review for a remote-access recovery design with multiple P2S hubs. Identify the profile actually installed on the client, listed endpoints, intended applications and the user’s access path. Keep the design’s expected behavior separate from an observed recovery result.\nDSE recommendation\nDSE recommends including profile distribution and client configuration in the recovery plan. Ask the remote-access owner to define which hubs and applications a representative user must reach during an outage. Identify dependencies that remain outside the Azure hubs, including the user’s connection. Preserve the approved profile and instructions for returning to normal operation.\nVerification\nIn an authorized rehearsal, confirm the client has the intended global profile and can reach the approved application through the available recovery endpoint. Record the selected hub, connection sequence and actual interruption. Test restoration separately. Do not declare remote access resilient solely because two hubs exist; retain evidence from the client and application path that users will rely on.\nOfficial references\nMicrosoft Learn: Disaster recovery design for Azure Virtual WAN.", "content_markdown": "## Source facts\n\nMicrosoft’s Virtual WAN recovery guidance describes a global profile listing point-to-site endpoints when multiple hubs have P2S gateways. Devices using that profile can connect through an available hub, with Virtual WAN’s traffic manager selecting the best hub for remote-user connectivity. The guidance separately identifies redundancy of the user’s access network as a recovery consideration. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/virtual-wan/disaster-recovery-design).\n\n## Applicability\n\nUse this review for a remote-access recovery design with multiple P2S hubs. Identify the profile actually installed on the client, listed endpoints, intended applications and the user’s access path. Keep the design’s expected behavior separate from an observed recovery result.\n\n## DSE recommendation\n\nDSE recommends including profile distribution and client configuration in the recovery plan. Ask the remote-access owner to define which hubs and applications a representative user must reach during an outage. Identify dependencies that remain outside the Azure hubs, including the user’s connection. Preserve the approved profile and instructions for returning to normal operation.\n\n## Verification\n\nIn an authorized rehearsal, confirm the client has the intended global profile and can reach the approved application through the available recovery endpoint. Record the selected hub, connection sequence and actual interruption. Test restoration separately. Do not declare remote access resilient solely because two hubs exist; retain evidence from the client and application path that users will rely on.\n\n## Official references\n\n[Microsoft Learn: Disaster recovery design for Azure Virtual WAN](https://learn.microsoft.com/en-us/azure/virtual-wan/disaster-recovery-design)." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260917-185-include-the-virtual-wan-global-p2s-profile-in-remote-user-recovery-testing/", "url": "https://update.dsesecurity.com/updates/dse-20260917-185-include-the-virtual-wan-global-p2s-profile-in-remote-user-recovery-testing/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-17" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260917-185-include-the-virtual-wan-global-p2s-profile-in-remote-user-recovery-testing/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Include the Virtual WAN global P2S profile in remote-user recovery testing", "item": "https://update.dsesecurity.com/updates/dse-20260917-185-include-the-virtual-wan-global-p2s-profile-in-remote-user-recovery-testing/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260917-185-include-the-virtual-wan-global-p2s-profile-in-remote-user-recovery-testing/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260917-185-include-the-virtual-wan-global-p2s-profile-in-remote-user-recovery-testing/", "url": "https://update.dsesecurity.com/updates/dse-20260917-185-include-the-virtual-wan-global-p2s-profile-in-remote-user-recovery-testing/", "headline": "Include the Virtual WAN global P2S profile in remote-user recovery testing", "description": "Verify the endpoint choices available to the actual remote client.", "abstract": "Verify the endpoint choices available to the actual remote client.", "articleBody": "Source facts\nMicrosoft’s Virtual WAN recovery guidance describes a global profile listing point-to-site endpoints when multiple hubs have P2S gateways. Devices using that profile can connect through an available hub, with Virtual WAN’s traffic manager selecting the best hub for remote-user connectivity. The guidance separately identifies redundancy of the user’s access network as a recovery consideration. Microsoft Learn.\nApplicability\nUse this review for a remote-access recovery design with multiple P2S hubs. Identify the profile actually installed on the client, listed endpoints, intended applications and the user’s access path. Keep the design’s expected behavior separate from an observed recovery result.\nDSE recommendation\nDSE recommends including profile distribution and client configuration in the recovery plan. Ask the remote-access owner to define which hubs and applications a representative user must reach during an outage. Identify dependencies that remain outside the Azure hubs, including the user’s connection. Preserve the approved profile and instructions for returning to normal operation.\nVerification\nIn an authorized rehearsal, confirm the client has the intended global profile and can reach the approved application through the available recovery endpoint. Record the selected hub, connection sequence and actual interruption. Test restoration separately. Do not declare remote access resilient solely because two hubs exist; retain evidence from the client and application path that users will rely on.\nOfficial references\nMicrosoft Learn: Disaster recovery design for Azure Virtual WAN.", "datePublished": "2026-09-17T16:31:55+00:00", "dateModified": "2026-09-17T16:46:29+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260917-185-include-the-virtual-wan-global-p2s-profile-in-remote-user-recovery-testing/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260917-185-include-the-virtual-wan-global-p2s-profile-in-remote-user-recovery-testing/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Include the Virtual WAN global P2S profile in remote-user recovery testing" }, "articleSection": [ "Cybersecurity", "Networks & Infrastructure" ], "keywords": [ "Cybersecurity", "Networks & Infrastructure", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "Cybersecurity", "url": "https://update.dsesecurity.com/topic/cybersecurity/" }, { "@type": "Thing", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" } ], "wordCount": 227, "timeRequired": "PT2M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Disaster recovery design for Azure Virtual WAN | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/virtual-wan/disaster-recovery-design" } } ] } }