Hello @Fotiosmark,   Yes, you need to apply the ACL but on all of them, this is an example.   ASA1: ACL from ASA1-subnet to ASA3-subnet   ASA2: On crypto sequence to ASA1 ACL from ASA3-subnet to ASA1-subnet   On crypto sequence to ASA3 ACL from ASA1-...

Hello @Fotiosmark,    You can follow this guide and you should be able to make the changes properly to make it work, the trick is on the "Hub" device and for information purposes, Cisco refers to this configuration as "VPN Spoke to Spoke"... https://...

Hello @arunnnarayanan,    You can try EEM, if you can ping from the inside you can schedule that command and keep the tunnel UP, the feature is called "VPN PREEMPT".   https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generat...