In which two modes is zone-based firewall high availability available? (Choose two.)