MX and Zscaler

[Aamir]

Hi,

I have a customer in process of deploying MX and Zscaler. The MX will have dual internet links with one IPSEC tunnel to Zscaler Node (ZEN's). My understanding is the IPSEC tunnel will be formed via the primary link connected to MX. What happens if the primary link goes down, will MX automatically create IPSEC tunnel to Zscaler Node (ZEN's) via the secondary internet link?

[PhilipDAth]

These are the instructions for configuring Zscaler.

https://documentation.meraki.com/MX/Security_Service_Edge_Integrations/Zscaler_Internet_Access_(ZIA)... 

Correct, the MX will try to build the VPN from the backup connection.  You'll want to use the "UserFQDN" approach for authenticating the VPN to make this work.

[Aamir]

thanks do we know how much time it would take it to make IPSEC tunnel via the backup internet link once primary link goes down?