State information of the services running on a tier-1 SR (Service Router) is synchronized to its standby tier-1 SR.
Note the following about state synchronization:
- State synchronization is supported for Gateway Firewall, Identity Firewall, NAT, IPSec VPN, and DHCP.
- If new sessions were going through a tier-1 SR just before a failover, it might happen that those sessions were not synchronized on the standby tier-1 SR and potentially affect the traffic for those sessions.