Dell NSA E5500 Getting Started Manual page 41

By default, the Include Certificate/Keys setting is enabled.
This specifies that Certificates, CRLs and associated settings
(such as CRL auto-import URLs and OCSP settings) are
synchronized between the primary and secondary units. When
Local Certificates are copied to the secondary unit, the
associated Private Keys are also copied. Because the
connection between the primary and secondary units is typically
protected, this is generally not a security concern.
Note: A compromise between the convenience of
synchronizing Certificates and the added security of not
synchronizing Certificates is to temporarily enable the
Include Certificate/Keys setting and manually
synchronize the settings, and then disable Include
Certificate/Keys.
To verify that primary and secondary Dell SonicWALL security
appliances are functioning correctly, wait a few minutes, then
power off the Primary Dell SonicWALL device. The secondary
Dell SonicWALL security appliance should quickly take over.
From your management workstation, test connectivity through
the secondary Dell SonicWALL by accessing a site on the
public Internet – note that the secondary Dell SonicWALL, when
active, assumes the complete identity of the primary, including
its IP addresses and Ethernet MAC addresses.
41 | Configuring a Stateful HA Pair
Log into the secondary Dell SonicWALL's unique LAN IP
address. The management interface should now display
Logged Into: Backup SonicWALL Status: Active in the
upper-right-hand corner.
Now, power the primary appliance back on, wait a few minutes,
then log back into the management interface. If stateful
synchronization is enabled (automatically disabling preempt
mode), the management GUI should still display Logged Into:
Backup SonicWALL Status: Active in the upper-right-hand
corner.
If you are using the Monitor Interfaces feature, experiment with
disconnecting each monitored link to ensure correct
configuration.