An administrator pushes a new configuration from Panorama to a pair of firewalls that are configured as an active/passive HA pair.Which NGFW receives the configuration from Panorama?