The Lookout Cloud Security Platform supports both Active/Standby and Active/Active high availability topologies with enterprise sites. Enterprise administrators can establish two IPsec VPN tunnels over each Wide Area Network (WAN) link to the primary and secondary Lookout Cloud Security Platform points of presence (POPs). These tunnels operate in an Active/Standby mode. Traffic is first forwarded over the Active tunnel to the primary POP. If the Active tunnel is terminated for some reason, the Standby tunnel can forward traffic to the secondary POP.

Enterprise sites having multiple WAN links can establish tunnels from each WAN to the primary and secondary Lookout POPs. All tunnels to the primary Lookout Cloud Security Platform POP can operate in an Active/Active mode. The Lookout Cloud Security Platform will forward the return traffic over the same tunnel it received from the enterprise site.