The PA-200 firewall supports HA lite, a version of active/passive
HA that does not include any session synchronization. HA lite does
provide configuration synchronization and synchronization of some
runtime items. It also supports failover of IPSec tunnels (sessions
must be re-established), DHCP server lease information, DHCP client
lease information, PPPoE lease information, and the firewall's forwarding
table when configured in Layer 3 mode.