1. A method of operating a firewall cluster, comprising: receiving a connection in a first node of a firewall cluster having three or more nodes; determining user data associated with the connection; and sharing the user data with at least another node in the firewall cluster.