Abstract: The disclosed technology may include determining that a change is to be made in virtual private network (VPN) connectivity between a first site and a second site while a first VPN connection is operational between a first device at the first site and a first gateway at the second site. VPN information is provided to a second gateway at the second site, the VPN information including information that is associated with a second VPN connection to be established between the first device and the second gateway. It is detected that network traffic is flowing over the second VPN connection between the first device and the second gateway. In response to detecting that the network traffic is flowing between the first device and the second gateway, a notification is sent to the first gateway for the first gateway to deprovision the first VPN connection.