With high-availability, if a crash or failure occurs your second GFI KerioControl machine jumps into action. Users see no drop of service. You have no vulnerability exposure.