While performing a health check for a Steelhead appliance at a remote site, you noticed some of the pass-through traffic should have been optimized. The pass-through reason for the suspicious traffic is "SYN on WAN side". Upon further investigating, you also noticed that all of the traffic initiated at the data center is pass-through while all of the traffic initiated at the remote site is optimized. There is only one path between the data center and the remote site and both Steelhead appliance are physically in-path. What are the possible causes? (Select 2)