update

Author: cherylmc

articles/virtual-wan/sd-wan-connectivity-architecture.md

@@ -36,7 +36,7 @@ The SD-WAN CPE continues to be the place where traffic optimization as well as p
 
 In this model, some vendor proprietary traffic optimization based on real-time traffic characteristics may not be supported because the connectivity to Virtual WAN is over IPsec and the IPsec VPN is terminated on the Virtual WAN VPN gateway. For example, dynamic path selection at the branch CPE is feasible due to the branch device exchanging various network packet information with another SD-WAN node, hence identifying the best link to use for various prioritized traffic dynamically at the branch. This feature may be useful in areas where last mile optimization (branch to the closest Microsoft POP) is required.
 
-With Virtual WAN, users can get Azure Path Selection, which is policy-based path selection across multiple ISP links from the branch CPE to Virtual WAN VPN gateways. Virtual WAN allows for the setup of multiple links (paths) to the same SD-WAN branch CPE, each link terminating on different public IP interface of the SD-WAN CPE. SD-WAN vendors can take advantage of this feature to select the most optimal path to Azure, based on traffic policies specific to these paths.
+With Virtual WAN, users can get Azure Path Selection, which is policy-based path selection across multiple ISP links from the branch CPE to Virtual WAN VPN gateways. Virtual WAN allows for the setup of multiple links (paths) from the same SD-WAN branch CPE; each link represents a dual tunnel connection from a unique public IP of the SD-WAN CPE to two different instances of Azure Virtual WAN VPN gateway. SD-WAN vendors can implement the most optimal path to Azure, based on traffic policies set by their policy engine on the CPE links.
 
 ## <a name="indirect"></a>Indirect Interconnect model