Secondary Enforce server running with Symantec services disabled. You need to start those services when primary Enforce goes down.
Detectors should have redundant instances running and processing in DR site as part of primary site configuration. (so always working and able to handle additional volume in disaster scenario)