All is working as expected apart from one subnet on HUB site.
I had to connect the Lan of the MX on a existing network so usually on a Cisco ASA you set up Lan interface as /32 ip and route out to the gateway of the subnet connected but on MX when you set up the LAN as /32 it refuses and requires a /30 minimum subnet.
At this time i can access all Vlan's apart from the lan interface lan devices, I.e the server A, or any other device on 10.255.255.0/24.
Thank you for taking your time to comment. The issue I had was that traffic was not getting back to the MX, so needed to find another way to make this work. But after some investigation it was found that server was getting the packed but replying via the default gateway and that was the ASA. ASA was dropping the packet. Asymmetric routing was happening. Had to configure tcp-state-bypass on the ASA to permit this subnet to talk to VPN subnet via ASA. All is working for TCP and UDP traffic. ICMP is still not working but i will take it. What I should of done is connect the MX on its own Vlan.