State information of the services running on a tier-1 SR (Service Router) is synchronized to its standby tier-1 SR.

Note the following about state synchronization:

  • State synchronization is supported for Gateway Firewall, Identity Firewall, NAT, IPSec VPN, and DHCP.
  • If new sessions were going through a tier-1 SR just before a failover, it might happen that those sessions were not synchronized on the standby tier-1 SR and potentially affect the traffic for those sessions.