Enhanced sase network processing node high availability

A method, comprising:

• monitoring a plurality of secure tunnels at an active network processing node (NPN);
• synchronizing periodically from the active NPN to a standby NPN;
• and
• processing each of the plurality of secure tunnels at the standby NPN using a predicted sequence number for an anti-replay sequence window for each of the plurality of secure tunnels after a failover event from the active NPN to the standby NPN, wherein the active NPN and the standby NPN are associated with a Secure Access Service Edge (SASE) network, wherein the SASE network includes a plurality of security processing nodes (SPNs), and wherein branch flows are assigned by a load balancer for security processing at one of the plurality of the SPNs.

A computer program product embodied in a non-transitory computer readable medium and comprising computer instructions for:

• monitoring a plurality of secure tunnels at an active network processing node (NPN);
• synchronizing periodically from the active NPN to a standby NPN;
• and
• processing each of the plurality of secure tunnels at the standby NPN using a predicted sequence number for an anti-replay sequence window for each of the plurality of secure tunnels after a failover event from the active NPN to the standby NPN, wherein the active NPN and the standby NPN are associated with a Secure Access Service Edge (SASE) network, wherein the SASE network includes a plurality of security processing nodes (SPNs), and wherein branch flows are assigned by a load balancer for security processing at one of the plurality of the SPNs.