ADAM PULSE Dual WAN and internet failover monitoring: how to know your backup will actually work
Buying a second internet connection does not automatically make a business resilient.
A backup circuit can fail silently.
A firewall can be configured incorrectly.
Failover can take too long.
Traffic can move to the secondary connection but critical applications may still fail.
Then the primary internet connection goes down and the organization discovers that its backup was never truly ready.
The important question is not:
Do we have two internet connections?
It is:
> Do we know both connections are healthy, and have we verified that > failover actually works?
That is where dual WAN monitoring becomes essential.
ADAM Pulse is designed to help USA Telecom customers monitor primary and backup connectivity independently, identify lost redundancy, preserve failover history and improve network resiliency.
What Is Dual WAN?
Dual WAN is a network design that uses two wide area network or internet connections.
A common configuration includes:
Primary WAN
and
Secondary or Backup WAN
The connections may use:
- Different ISPs
- Different access technologies
- Different physical paths
- Different bandwidth levels
The purpose is usually to improve availability, resiliency or traffic management.
What Is Internet Failover?
Internet failover is the process of moving network traffic from an unavailable or degraded primary connection to another available connection.
A simplified sequence is:
Primary WAN Healthy
↓
Primary WAN Fails
↓
Firewall or SD WAN Detects Failure
↓
Traffic Moves to Backup WAN
↓
Business Continues Operating
A resilient design should also address what happens when the primary connection returns.
Why Is Backup Internet Important?
Modern businesses depend on connectivity for:
- Zoom
- VoIP
- Microsoft 365
- Cloud applications
- POS
- Payment processing
- VPN
- Remote access
- Customer service
- SaaS platforms
A single internet connection can become a single point of failure.
Why Is Having Two ISPs Not Enough?
Redundancy only helps if the backup path is:
- Available
- Properly configured
- Routable
- Capable of supporting required traffic
- Continuously monitored
- Tested
A second circuit that has been down for three weeks provides no protection.
What Is a Silent Backup WAN Failure?
A silent failure occurs when the backup connection becomes unavailable while the primary remains healthy.
Users notice nothing.
IT may notice nothing.
But redundancy has been lost.
The site is now operating with a hidden single point of failure.
ADAM Pulse should treat this as a meaningful operational condition:
SITE ONLINE —- REDUNDANCY REDUCED
Why Should Backup Internet Be Monitored Continuously?
Because backup circuits may sit idle for long periods.
Continuous monitoring can help answer:
Is WAN2 reachable?
Is latency normal?
Is packet loss present?
Has the circuit been flapping?
When did it last fail?
Do not wait until the primary circuit fails to discover the condition of the backup.
What Should You Monitor on a Dual WAN Network?
At minimum:
- Firewall availability
- Primary WAN availability
- Backup WAN availability
- Primary WAN latency
- Backup WAN latency
- Packet loss
- Jitter where relevant
- Failover events
- Failback events
- External reachability
- Historical incidents
What Is the Difference Between Failover and Failback?
Failover moves traffic away from a failed or degraded connection.
Failback returns traffic to the preferred connection after recovery.
Both should be understood and tested.
An unstable primary connection can create repeated transitions between paths.
What Is WAN Flapping?
WAN flapping occurs when a connection repeatedly changes between healthy and unhealthy states.
For example:
UP
DOWN
UP
DOWN
Repeated state changes can create:
- Zoom interruptions
- VoIP problems
- VPN resets
- Application reconnects
- Unstable routing
Historical monitoring helps reveal the pattern.
How Does a Firewall Know the Primary Internet Is Down?
Firewalls and SD WAN platforms may use health checks or performance measurements to determine whether a WAN path is usable.
The exact logic depends on the platform and configuration.
Potential measurements include:
- Reachability
- Latency
- Packet loss
- Jitter
- Path health
Failover logic should be designed around actual business requirements.
Why Is Monitoring Only the ISP Modem Not Enough?
A modem may be powered and reachable while broader internet connectivity is impaired.
Monitoring should consider multiple points such as:
Firewall
Provider path
External destinations
This helps distinguish device availability from usable internet service.
Why Should You Test Multiple External Destinations?
If failover logic depends on one destination, a problem with that destination could create a false outage condition.
Multiple independent targets can provide better context.
The goal is to determine whether the path itself is unhealthy.
What Is False Failover?
False failover occurs when traffic moves away from a healthy connection because the health detection method incorrectly determines that the path has failed.
Potential contributors include:
- Poor health check design
- One unreliable test destination
- Aggressive thresholds
- Temporary packet loss
- Configuration problems
Monitoring should preserve the conditions that triggered the event.
Can Packet Loss Trigger Failover?
Some platforms can use packet loss as part of path selection or health logic.
Whether that is appropriate depends on:
- Application requirements
- Network design
- Platform capabilities
- Thresholds
The configuration should avoid both failing too late and switching unnecessarily.
Can High Latency Trigger Failover?
Performance based routing systems may consider latency when selecting paths.
Again, thresholds should be designed carefully.
A path that is slightly slower is not necessarily unusable.
Can Jitter Trigger Failover?
For real time traffic, some SD WAN platforms may consider jitter or other quality measurements.
This can be valuable for Zoom and VoIP traffic when supported and correctly configured.
What Happens to Zoom During Internet Failover?
The user experience depends on:
- Failover speed
- Firewall design
- NAT behavior
- Public IP changes
- Application behavior
- Backup circuit quality
A backup connection can reduce downtime, but seamless application continuity should not be assumed without testing.
What Happens to VoIP During WAN Failover?
Existing calls may be affected depending on network and voice architecture.
Possible symptoms include:
- Brief audio interruption
- Call drop
- Session reestablishment
- Registration changes
Test the actual production design.
What Happens to VPN During Failover?
VPN behavior depends heavily on:
- Tunnel architecture
- Public IP addressing
- Remote peer configuration
- Routing
- Firewall platform
Some tunnels may automatically reestablish.
Others may require specific redundant configurations.
How Do You Test Internet Failover?
A controlled failover test can include:
Step 1: Establish Baseline
Confirm both WAN connections are healthy.
Step 2: Start Critical Applications
Test Zoom, VoIP, VPN and important cloud applications.
Step 3: Simulate Primary Failure
Use an approved method appropriate to the environment.
Step 4: Measure Detection
How quickly is the failure recognized?
Step 5: Measure Transition
How quickly does traffic use the backup?
Step 6: Validate Applications
Do critical services continue or recover?
Step 7: Restore Primary
Return the preferred path.
Step 8: Observe Failback
Does traffic return correctly?
Step 9: Document Results
Record timing, application impact and problems.
Production testing should be planned carefully to avoid unintended disruption.
How Often Should Failover Be Tested?
There is no universal schedule.
Frequency should reflect:
- Business criticality
- Change frequency
- Compliance requirements
- Network architecture
- Previous failures
Testing should also be considered after meaningful network changes.
What Should a Failover Test Report Include?
Document:
- Site
- Date and time
- Primary carrier
- Backup carrier
- Trigger method
- Detection time
- Transition time
- Applications tested
- User impact
- Failback behavior
- Issues discovered
- Corrective actions
This turns testing into an operational record.
What Is Carrier Diversity?
Carrier diversity means using different service providers to reduce dependence on one carrier.
But different carrier names do not always guarantee independent infrastructure.
Organizations with high availability requirements may need to investigate actual path and facility diversity.
What Is Physical Path Diversity?
Physical diversity attempts to reduce the chance that both circuits share the same vulnerable infrastructure.
For example, two services entering a building through the same conduit may both be affected by one fiber cut.
True resiliency requires understanding dependencies.
Should the Backup ISP Be a Different Technology?
Sometimes.
Examples could include:
- Fiber plus cable
- Fiber plus fixed wireless
- Wired broadband plus cellular
Different technologies may reduce some shared failure risks.
The right design depends on business requirements and available services.
How Much Bandwidth Should Backup Internet Have?
The backup does not always need to match the primary circuit.
But it must support the traffic considered critical during failure.
Ask:
What must continue operating?
Then size and prioritize accordingly.
Should All Traffic Use the Backup During an Outage?
Not necessarily.
During degraded operation, organizations may prioritize:
- Zoom and voice
- POS
- Business applications
- VPN
- Critical SaaS
and restrict nonessential traffic.
Policy depends on firewall or SD WAN capabilities.
What Is Reduced Redundancy?
Reduced redundancy means the site remains operational but one expected protective component has failed.
Example:
Primary WAN: Healthy
Backup WAN: Down
The correct operational status is not simply:
UP
It is:
UP WITH REDUCED RESILIENCY
This is a major concept for ADAM Pulse.
Why Is Reduced Redundancy a Business Risk?
Because the next failure may become an outage.
A backup circuit failure is therefore not merely a low priority technical event.
It represents increased exposure.
How Can Multi Site Businesses Monitor Dual WAN?
For every location, maintain:
- Primary carrier
- Backup carrier
- Circuit IDs
- WAN status
- Performance baseline
- Failover state
- Historical incidents
A centralized view can identify sites operating without expected redundancy.
What Should a Dual WAN Dashboard Show?
A useful view might include:
Site Primary Backup Active Path Resiliency
————- ————- ————- ——————- —————— Site 01 Healthy Healthy Primary Full Site 02 Healthy Down Primary Reduced Site 03 Down Healthy Backup Degraded Site 04 Down Down None Critical
This communicates operational meaning rather than raw device status.
How Can ADAM Pulse Help Monitor Internet Failover?
ADAM Pulse should help USA Telecom customers answer:
Is the primary WAN healthy?
Is the backup WAN healthy?
Which path is active?
Did failover occur?
How long was the primary unavailable?
Did the backup perform normally?
Did traffic fail back?
Has the circuit been flapping?
Has the site lost redundancy?
That provides a much clearer picture of network resiliency.
The ADAM Pulse Dual WAN Resiliency Framework
MONITOR BOTH → DETECT DEGRADATION → IDENTIFY ACTIVE PATH → VERIFY FAILOVER → VERIFY FAILBACK → DOCUMENT → TEST
Monitor Both
Never ignore the idle circuit.
Detect Degradation
Identify loss, latency or instability.
Identify Active Path
Know which WAN carries traffic.
Verify Failover
Confirm backup operation.
Verify Failback
Confirm normal restoration.
Document
Preserve event history.
Test
Validate resiliency before a real emergency.
Backup Internet Is Insurance You Must Continuously Verify
A second circuit is valuable only when it is ready when needed.
ADAM Pulse provides managed network monitoring designed to help USA Telecom customers monitor primary and backup WAN connections, identify lost redundancy, preserve failover history and improve network resiliency.
Monitor both circuits.
Detect silent failures.
Know the active path.
Test failover.
Verify recovery.
Talk with USA Telecom about using ADAM Pulse to monitor and validate your network resiliency.
Frequently asked questions
What is dual WAN?
Dual WAN uses two wide area network or internet connections to improve resiliency, availability or traffic management.
How do I know whether my backup internet is working?
Monitor the backup connection independently and perform controlled failover testing appropriate to your environment.
Why should I monitor a backup circuit if nobody is using it?
Because it can fail silently while the primary remains healthy, leaving the business without expected redundancy.
What is WAN failover?
WAN failover moves traffic from an unavailable or degraded primary path to another available connection.
Can Zoom and VoIP calls survive internet failover?
Results depend on network architecture, failover speed, NAT, application behavior and backup path quality. The actual environment should be tested.
Sources
- Cisco — Troubleshoot Packet Drops. Congestion, buffer exhaustion and interface errors as drop causes.
- IETF — RFC 792: Internet Control Message Protocol (September 1981, Internet Standard, STD 5). Why devices may rate-limit or deprioritise the ICMP that ping and traceroute depend on.
- Cisco — What Is Network Latency?
- FCC — Measuring Broadband America. Methodology for measuring latency and packet loss alongside throughput.
- NIST — The NIST Cybersecurity Framework (CSF) 2.0 (NIST CSWP 29, 26 February 2024). Continuous monitoring (DE.CM) and the logging that supports it (PR.PS-04).
A single test from a single location at a single moment rarely proves where a fault sits. Correlate against history, test from more than one point, and preserve timestamped evidence before changing configuration or rebooting equipment.
USA Telecom Consulting LLC is a Service-Disabled Veteran-Owned Small Business running a 24/7 NOC. We monitor networks, circuits and firewalls for regulated and defense-supply-chain organizations.