@PhilipDAth we have checked the security groups and they aren't blocking any traffic , the packet was being received by vMX and then there were update messages which was sent by Palo Alto to the vMX. after multiple update messages which were received on the vMX end  there was a reset message sent from vMX ... View more

It will be difficult to do active/active in Azure.   The easiest way would be to create two supernets for your spokes.  Put all the spokes in one Supernet on HubA as their primary, and all the spokes in the second supernet on HubB.  Then you'll be able to use an initial static route in Azure for each supernet.   This article is a close match. https://www.willette.works/active-active-meraki-sd-wan-headends/  ... View more