network scan issues

[joedansereau]

I am having issues with a Nessus scan of my networks. I have multiple site-to-site vpn tunnels with different subnets at each site. When I run a Nessus scan on the remote sites, the tunnels drop and will not reestablish until the firewall is rebooted on my end. ASA-5510, OS v8.2.5. Any ideas?

[brquinn]

You should first check your syslogs to see why the traffic is being denied. Once in the failed state, you can also check the packet-tracer output for some VPN traffic to see why the ASA isn't forwarding it.

At the time of the failure, does either endpoint have the appropriate isakmp or ipsec sa's built?

Thanks,

Brendan