In the "System Configuration > ACS Internal Database Replication" I have selected the "Network Configuration Device tables" send entry on the outbound sender and the receive entry on the inbound receiver. The AAA NDG groups themselves come across OK...