A live firewall helper tweak fixes traffic until policy reload restores stricter persisted defaults during a failover rehearsal

The symptom disappears immediately and returns at the next state boundary. Normal traffic masked the issue until the standby or alternate path became active under rehearsal conditions.