Site-to-site VPN won't work with very specific ACLs

[jasonww04]

Can anyone explain why I have no problems with a VPN using this ACL:

permit ip 172.18.85.0 0.0.0.255 10.11.0.0 0.0.0.255

but this one:

permit ip 172.18.85.0 0.0.0.255 10.11.0.0 0.0.7.255 doesn't work?

I am only narrowing down the number of networks on the 10.11. side.

[Collin Clark]

Double check that your ACL's match on each side.

http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a00807e0aca.shtml#Solution9

[jasonww04]

Part of the problem is that one endpoint is Microsoft ISA which has very limited VPN abilities. It won't let me match ACLs exactly.