All VPN data connections directly to your data processor (CU*Answers, CU*Northwest, CU*South, etc.) should be anchored by a stable internet service provider (ISP) with a static IP.

Outlier branches that receive CBX/GOLD connectivity through a primary or secondary location (which has a static IP and VPN tunnel back to the data processor) can leverage Dynamic DNS, Dialup VPN IPSEC, and SD-WAN with multiple ISPs to form more stable connections back to the data processors using their primary/secondary locations as a hub.

Certain vendors of routing and firewalling equipment have technologies built in to be able to navigate and leverage dynamic IPs and carrier grade NATs.

These types of connections have inherent risks due to their dynamic nature and should not be considered as a primary and/or sole ISP.