Session Setup Option
The firewall distributes the session setup load based on parity of the source IP address. This is a deterministic method of sharing the session setup.
The firewall uses a hash of the source and destination IP addresses to distribute session setup responsibilities.
The active-primary firewall always sets up the session; only one firewall performs all session setup responsibilities.
The firewall that receives the first packet of a session performs session setup.