this is tail output from my units.
active
[root@ve11a:Active:Changes Pending] config tail -f /var/log/ltm
[root@ve11a:Active:In Sync] config
standby
[root@ve11b:Standby:Changes Pending] config tail -f /var/log/ltm
Oct 23 22:11:21 ve11b notice mcpd[4948]: 01071038:5: Loading keys from the file.
Oct 23 22:11:24 ve11b notice mcpd[4948]: 010714a0:5: Sync of device group /Common/dg to commit id 220 5802480386252598085 /Common/ve11a.acme.com from device /Common/ve11a.acme.com complete.
[root@ve11b:Standby:In Sync] config
Do I need to create an internal VLAN for this per the link below device uses internal VLAN.i do not think so. ha vlan should be fine. anyway, have you checked port lockdown (allow-service) which Steve suggested? it is set to default, isn't it?