I have 2 pix 515E firewalls configured for stateful failover. Works great but just want to know if the primary unit fails and the second becomes active then the primary becomes active is there a way to get the primary to become the active unit again...

I am trying to setup a basic vpn client to pix tunnel and am able to get the ipsec/udp working but not the ipsec/tcp working. Anyone have any ideas ?