After some months of operation on a router, without the HSEC license, the IPSec tunnels stops forwarding packet and increase the counters, without any configurations changes.
For troubleshoot the problem the feature Datapath Packet Trace was used with the following output, showing that the packets was dropped by the CERM as the bug description, and a reboot solved the problem.
The sh version of the router is:
