I am running on a pair of FWSM's and have several firewall instances defined. I have split these instances into the two failover groups so that Ican use the active/active functionality in the FWSM. However, our pharmacy technology unit has changed their requirements and now need an Internet facing interface. My problem is that the Internet facing interface is defined on the firewalls in the other failover group. Evidently, you cannot share interfaces between failover groups. I cannot find any documentation that defines a process for moving a virtual firewall from one failover group to another. I can do this, but I think I must disable failover on the FWSM itself, thereby disabling failover on all of my firewall instances. Is there a better way to do this?
I have this problem too.