I'm just looking for information on the IOS zone based firewall in HA mode also running DMVPN and if its possible, supported and a good idea or not. I would prefer to use 2 HA break out firewalls for firewalling and DMVPN +internet on 2 ISRs dedicated to the job but this may not be in budget for this particular site. Any information or advise would be appreciated.