• Is it possible to have bi-directional sync?  In otherwords, configure both firewalls to sync with each other?  I actually DID set that up, and had some strange results, but it occurred to me that I did it wrong.  Maybe someone out there has gotten this to work, and can give me some ideas?


  • only the primary machine has anything to sync, aside from the config. If you sync the config from primary to secondary and secondary back to primary you're going to break stuff. It's possible to set it up that way, as I've heard of people doing it before and breaking stuff.