Why can't I use a crossover cable between two firewalls (IP530's) for the purpose of CheckPoint state synchronization?  An answer from Nokia indicated it is better to have both firewalls connected via hub/switch.  Please point me toward a (somewhat) definitive answer...