Connection information of the traffic running on a tier-0 SR (Service Router) is synchronized to its standby tier-0 SR.

Note the following about state synchronization:

  • State synchronization is supported for Gateway Firewall, Identity Firewall, NAT, IPSec VPN, and DHCP.
  • If new sessions were going through a tier-0 SR just before a failover, it might happen that those sessions were not synchronized on the standby tier-0 SR and potentially affect the traffic for those sessions.