Site to site VPN between PA & Azure || Failover / HIgh availability

S.Kamtaria — Thu, 09 Jul 2026 20:09:54 GMT

We have configured two Site-to-Site VPN tunnels between our Palo Alto firewall and Azure VPN Gateway to provide redundancy and high availability.

However, we are encountering an issue where we are unable to keep both VPN tunnels active simultaneously:

When both VPN tunnels are up, connectivity between our on-premises environment and Azure becomes unstable or completely fails.
If we disable one of the VPN tunnels and leave only a single tunnel active, connectivity works normally without any issues.
We would like to maintain both VPNs in an active state for redundancy and failover purposes, but currently this setup is causing routing/connectivity problems.

We are looking for guidance on what configuration areas we should review

Re: Site to site VPN between PA & Azure || Failover / HIgh availability

S.Kamtaria — Thu, 09 Jul 2026 20:47:32 GMT