Cisco Umbrella has stopped supporting automatic third-level failover (disaster recovery) for IPsec tunnels in the Japan, India, Australia, Singapore, and Hong Kong data centers. Previously these data centers had automatic third-level failover to Osaka.
This follows the same change made in North and South America earlier this year.
Why are we making this change?
Due to continued investment in operations and architecture of our systems, third-level failover is no longer necessary as a default configuration.
What will happen to the disaster recovery data centers?
The data centers previously dedicated to third-level IPsec failover will be repurposed as regular data centers, available for primary or backup IPsec tunnels.
What if I still want to use third-level of data center failover?
For most customers we recommend configuring two tunnels, one to each DC in a region, with unique IPsec tunnel IDs per tunnel. Customers can elect to set up a third tunnel to an additional region. This type of failover configuration is unique to each customer's device.
Note: This change has no impact on Meraki SDWAN connectors or Secure Connect