maestro reference
From cpwiki.net
security groups
Single Management Object (SMO) handles all management tasks, such as Security Gateway configuration, policy installation, remote connections, and logging. The Active Security Group Member with the lowest ID number is automatically assigned to be the SMO.
identify the SMO and tasks
# asg stat -i tasks
policy installation
Management ServerClosed installs the policy on the SMO Master and then it is copied to the other members.