Page https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/HighAvailablityStartupGuide/AboutHA/HAAchitecture/index.html#packet-flow doesn't explain how the packet flows in active-active scenario when the Auxiliary firewall is processing the packet.
It states that the packet always travels through the primary firewall. Perhaps the processing is offloaded to the auxiliary due to the primary passing the traffic down the HA link, but it's impossible to know from there because that situation is not addressed at all. So the traffic isn't offloaded from the single firewall, just the processing?
