Also for visibility, additive FW rules are immediate. If you have a FW rule where your are taking away or blocking access, you need to roll the Primary MX. State / rule change is immediate, spare takes over and processes. Still have the VPN tunnel / session delay.
... View more