AS/Topology on a cluster pair?

[hardhhhat]

Hi,

I am stillrunning through an inherited set of firewalls and finding issues all over the place. This one is dealing with Anti-Spoofing.

We have cluster pairs and the topology/AS is different on the individual enforcement modules and the cluster. When I use the get interfaces for topology it only sees 2 of the 4 clustered interfaces yet on the individuals they have all 4. Also, would the AS on the cluster be used over the AS on the individual as they are all different too.

I think this has happened when the firewall hardware was upgraded and the chekpoint nodes themselves were not. I need to get them all in line with each other while running live services through them - I have no test environment to work in either.

Many thanks,

HH