I am currently setting up a pair of PIX 525 firewalls in an active/active arrangement with multiple security contexts. What is the difference between setting the MAC address and standby MAC address at the system level in the failover groups, or at an interface in a security context. I appear to be able to do any combination of one or the other or both? Which take s precidence? Is there a reason why you would use one or the other places to set the MAC and standby MAC?
Nope, you can still set them in the system config, under the 'failover group' section.
PS> If this solves your issue, please don't forget to check the box so we can clear it off the list.