Security scanner flags admin port exposure only on standby node

The active node looks protected, but a standby or failover host still exposes the management service to a wider segment.