Platform GCP
Activity Upgrade

Find Incomplete or Misconfigured Access Lists Defined for a Tunnel

The "incomplete or misconfigured access-list" condition could only occur on ASA devices.

Procedure

1

In the Security Cloud Control platform menu, choose Products > Firewall.

2

In the left pane, click Manage > Secure Connections > Network Connections > Site to Site VPN to open the VPN page.

3

Select Table View.

4

Open the Filter panel by clicking the filter icon .

5

Select each device reporting an issue and look in the Peers pane at the right. The peer information shows you both peers.

6

Click on View Peers for one of the devices.

7

Double-click the device reporting the issue in the Diagram View.

8

Click Tunnel Details in the Tunnel Details panel at the bottom. You will see the message, "Network Policy: Incomplete"