So we shouldn't expect another outage for, oh, three years or so. Sounds good to me.

Redundant failover architecture should include the management tools, folks. I'm spouting because I don't know the nature of the problem or the technical solution, but hey, if the system were in-house, I'd know, wouldn't I?