packet-tracer input outside icmp 192.168.2.1 8 0 192.168.1.5 Phase: 1 Type: ROUTE-LOOKUP Subtype: No ECMP load balancing Result: ALLOW Elapsed time: 31620 ns Config: Additional Information: Destination is locally connected. No ECMP load balancing. Found next-hop 192.168.1.5 using egress ifc inside(vrfid:0) Phase: 2 Type: UN-NAT Subtype: static Result: ALLOW Elapsed time: 2325 ns Config: nat (inside,outside) source static NGFW-Remote-Access-VPN|natIpv4Grp NGFW-Remote-Access-VPN|natIpv4Grp destination static NGFW-Remote-Access-VPN|natIpv4PoolGrp NGFW-Remote-Access-VPN|natIpv4PoolGrp no-proxy-arp route-lookup Additional Information: NAT divert to egress interface inside(vrfid:0) Untranslate 192.168.1.5/0 to 192.168.1.5/0 Phase: 3 Type: ACCESS-LIST Subtype: log Result: ALLOW Elapsed time: 6277 ns Config: access-group NGFW_ONBOX_ACL global access-list NGFW_ONBOX_ACL advanced trust object-group |acSvcg-268435459 ifc outside object AnyConnect_VPN_Pool_Network_JJ ifc inside object Internal_Network_JJ rule-id 268435459 access-list NGFW_ONBOX_ACL remark rule-id 268435459: ACCESS POLICY: NGFW_Access_Policy access-list NGFW_ONBOX_ACL remark rule-id 268435459: L5 RULE: Allow VPN IN object-group service |acSvcg-268435459 service-object ip Additional Information: Phase: 4 Type: NAT Subtype: Result: ALLOW Elapsed time: 6277 ns Config: nat (inside,outside) source static NGFW-Remote-Access-VPN|natIpv4Grp NGFW-Remote-Access-VPN|natIpv4Grp destination static NGFW-Remote-Access-VPN|natIpv4PoolGrp NGFW-Remote-Access-VPN|natIpv4PoolGrp no-proxy-arp route-lookup Additional Information: Static translate 192.168.2.1/0 to 192.168.2.1/0 Phase: 5 Type: NAT Subtype: per-session Result: ALLOW Elapsed time: 6277 ns Config: Additional Information: Phase: 6 Type: IP-OPTIONS Subtype: Result: ALLOW Elapsed time: 6277 ns Config: Additional Information: Phase: 7 Type: CP-PUNT Subtype: Result: ALLOW Elapsed time: 28365 ns Config: Additional Information: Phase: 8 Type: WEBVPN-SVC Subtype: in Result: DROP Elapsed time: 1395 ns Config: Additional Information: Result: input-interface: outside(vrfid:0) input-status: up input-line-status: up output-interface: inside(vrfid:0) output-status: up output-line-status: up Action: drop Time Taken: 88813 ns Drop-reason: (acl-drop) Flow is denied by configured rule, Drop-location: frame 0x000055fdd0203e80 flow (NA)/NA