Two Unified Access Gateway appliances sit behind a VIP so inspectors can still reach VDI while one appliance is patched. What availability idea is that?

Two UAGs behind a VIP so inspectors still reach VDI while one appliance is patched is high availability of the access tier. In municipal EUC terms, treat the endpoint as a window into city systems when the architecture says so, not as the system of record for the files or apps in the stem. Distractor concept: Two UAGs are not inland datacenter disaster recovery by themselves. Distractor concept: A VIP does not vMotion the inspector's laptop via DRS. Distractor concept: The VIP is not App Volumes HA attaching packages when an appliance is down. Exam caveat: Redundant UAGs + load balancing = access-tier HA, not second-site DR or packaging HA. Operational check: Patch one UAG behind the VIP and confirm inspectors still authenticate and launch VDI through the remaining appliance. Record the chosen control and the rejected failure modes in the civic change ticket or runbook so on-call staff and auditors share the same rationale after the next maintenance window. Re-validate after personnel or image changes that the same control still meets the city's continuity, security, and support expectations for this service. Helpdesk coaching tip aligned to the conversational brief: Two UAGs behind one address is like two booths on the same driveway. Inspectors keep reaching VDI while one appliance is patched. That is access-tier HA, not a second datacenter.