What two conditions must be met when you are manually adding CheckPoint appliances to an existing cluster?