Include the Virtual WAN global P2S profile in remote-user recovery testing

Source facts

Microsoft’s Virtual WAN recovery guidance describes a global profile listing point-to-site endpoints when multiple hubs have P2S gateways. Devices using that profile can connect through an available hub, with Virtual WAN’s traffic manager selecting the best hub for remote-user connectivity. The guidance separately identifies redundancy of the user’s access network as a recovery consideration. Microsoft Learn.

Applicability

Use this review for a remote-access recovery design with multiple P2S hubs. Identify the profile actually installed on the client, listed endpoints, intended applications and the user’s access path. Keep the design’s expected behavior separate from an observed recovery result.

DSE recommendation

DSE recommends including profile distribution and client configuration in the recovery plan. Ask the remote-access owner to define which hubs and applications a representative user must reach during an outage. Identify dependencies that remain outside the Azure hubs, including the user’s connection. Preserve the approved profile and instructions for returning to normal operation.

Verification

In an authorized rehearsal, confirm the client has the intended global profile and can reach the approved application through the available recovery endpoint. Record the selected hub, connection sequence and actual interruption. Test restoration separately. Do not declare remote access resilient solely because two hubs exist; retain evidence from the client and application path that users will rely on.

Official references

Microsoft Learn: Disaster recovery design for Azure Virtual WAN.