I keep getting this message: "Denied due to NAT reverse path failure". I am having a problem understanding how I would apply nat in my situation (Older ASA code). I have Windows 10 clients (Road_Warriors) using IKEv2.connecting to a Mikrotik router (using digital certificates). The mikrotik is directly connected to the DMZ interface of my 5510 ASA. I am trying to get the vpn traffic to go thru the asa and hit the lan subnet (Inside) of the ASA. Traffic is not coming from outside but to dmz interface thru tunnel. I can ping all the way thru tunnel to DMZ interface of ASA and get a response but nothing beyond and vice versa. See attached sanitized config.
Win10 --> Internet--> Mikrotik --> ASA
