Brand new GTM deployment

hi,   i'm deploying two brand new GTMs, one in each DC.   I have configured synchronization groups using the external (public) self IP on each GTM   The port lockdown settings for each self ...