ipsec vpn both primary and secondary both firewall tunnels are up

[bit_byte]

passive firewall
Active firewall.
===============================================
we did failover from secondary firewall to primary.
After failover Primary firewall all vpn tunnels came up and On passive firewall tunnel info up.
is it normal behavior on passive firewall tunnel info up ?
or passive firewall tunnle info and IKe info should down ?

active firewall below image ..

passive firewall below image we can able to see IKE info is down but tunnel info is up .

passive firewall I think both IKE and tunnel should be down.

is that normal on the passive firewall tunnel info up?

or  GUI error?

[MP18]

@bit_byte 

We also have Active Passive Setup with IPSEC tunnel.

On passive PA we have all the Tunnel interface show as up.

Also status is green.

This is by design.

[SutareMayur]

@bit_byteYes, this is normal behavior as all active IPSEC SAs gets copied/syned to passive firewall from Active via HA2 link.

Mayur