A firewall cluster syncs configuration but not connection state, so asymmetric return traffic after failover only breaks one long-lived application protocol

Policies match and sessions establish initially, yet one application fails after failover because session state was not replicated the way operators assumed.