...
1006759
After an HA failover, there is no IPsec route in the kernel. FGT7000F/2633: No IPsec route in system kernel after HA failover (role=standby on master chassis).