A firewall failover appears clean and return traffic breaks

A failover test passes basic reachability but one app with policy-routed WAN egress dies only after the standby becomes active.