NetOps teams tend to have various traffic engineering designs that complicate threat detection deployments and involve in-tensive CAPEX and OPEX spending. NetOps often design sym-metric and asymmetric routing in a perimeter network with inline traffic that traverses multiple NGFWs. It’s challenging to synchronize asymmetric traffic between inline security ap-pliances that are a part of the same threat prevention domain. However, state synchronization between firewalls is impera-tive in such scenarios, and inflexible configurations can block traffic from the existing network, resulting in lost service continuity and downtime.