pfsync


 The synchronization between firewalls is done over network

 The updates are sent in multicast and without authentication (crossover, IPsec)

 We don't have a true native dynamic failover... yet. But...