Best solution for multi-site VPN

VPN
1

We currently have 4 sites and all are connected to our main office through IPsec tunnels with ASA. Problem is ASAs are a pain in the ass when it comes to just about anything, so we are slowly moving towards FortiGates. But also if our HQ goes down we lose all communication to the other sites (internally).

So in the meantime, I’m looking for the simplest way to get a Mesh VPN network with the ASAs. Is this feasible? I can’t find much on the topic. Or do I just wait and implement when we get new gear?

Edit: I appreciate all the recommendations. I am going to look more into SD-WAN, as for now, probably manage it with just adding more tunnels

2

It’s only 4 sites, the easiest option is just a VPN tunnel to each site. That’s 2 extra tunnels per firewall. Shouldn’t take much to setup, just a bunch of copy and pasting with some IP tweaks. You already have most of it configured with the current tunnel, so it’s really just a new ACL, crypto map entry, and tunnel group per tunnel.