In a DBHA setup due to security policy/configuration mismatch on Check Point APMs, APMs may be put in a state synchronization "ready state" on the primary chassis resulting in traffic not passing the firewalls.