ProxySG will check the preferred domain controller (DC) every 30 seconds using an LDAP pings. So in the case of ProxySG failover to the alternate DC, it will check the preferred DC every 30 seconds. If the preferred DC comes back online or respond to the LDAP pings, the ProxySG will switch back to the preferred DC.