Thanks Philip, Ok now i see. Yes, I have the exactly same ACLs that match bidirectionally. One thing I noticed in ASDM that I have data lifetime set to the default value 4GB although this config is not seen on the running-config. I will set it to unlimited to see if this helps. Regards, Tats
... View more