Site-to-site VPN - Why can't you view your settings when you have a failover group

Why can't you view your site-to-site settings when you have a failover group active. Whenever I'm working with a SOPHOS engineer on an issue, the first thing they want to do is view the VPN settings, but they can't without taking the VPN tunnel offline. Seems like a silly design choice. I can understand if you can't make changes without turning off the failover group, but not being able to even view it is no good.