I know this is over a year old, but you saved my butt tonight.  I'm replacing an ASA cluster with an MX cluster in a colo and don't control the upstream device.  I have a few dozen 1:1s and only a few were working.  Thank you for your post! ... View more