A network engineer is designing a high-availability solution for a pair of firewalls that must handle peak traffic loads. The business requires that both firewalls actively pass traffic during normal operations so that the full combined throughput of both devices is available, while still providing redundancy if one fails. Which redundancy configuration best meets these requirements?