Good Afternoon,   We have client with an Azure tenant running a few IaaS services generally on Microsoft Windows VMs.   The Azure tenant is across three regions - West Europe, Central US & Australia East.   We would like to propose a vMX appliance to act as a perimeter Layer 7 firewall which will allow for site to site VPNs between the client's geo-located offices and this vMX appliance. Client VPN is also a requirement.   Currently the client has physical offices in London (most of the users are based here) with smaller offices in Colombia, LA, Melbourne, Sydney, New York.   We are trying to understand if   a) we need to have SD-WAN in place to accomplish this design, b) we need to have a vMX appliance for each Azure region or will a single vMX appliance suffice c) How can we achieve HA in this design if there is only one vMX appliance.   Any help will be appreciated.   Many thanks     ... View more