SDWAN implementation with HA cluster.

[MRMunemo]

Good day,

Please assist with the best HA cluster solution to the diagram below.I am not sure where to place the other new MX67. I need to have HA. Where can I place the 2nd firewall?

Will i be able to achieve HA if i install a new internet circuit on Site A?

Many thanks

[GIdenJoe]

If I read your picture correctly you are not really running autoVPN since you only have switches on the other sites and the ISP gear only exists on site C.

In that case  you just place a second MX67 in site C.

If you wanted to have a true SDWAN between all three sites you would need to have individual or HA pair firewalls at each site having their own WAN or internet outbreak.

[Brash]

As @GIdenJoe said, unless you're planning to purchase some additional firewalls and perform a redesign, you would place your MX into site C. There it would join the existing MX in a HA pair, thereby providing device level redundancy.