Currently VRRP protocol is not allowed by Cloud Firewall, so having 2 (or more) droplets using KeepAlive works well but when using Cloud Firewall it doesn't works because there is no option to add a rule to Firewall to allow VRRP.