Hi, Did you check the timestamp window if it is correctly set ? Also, check if logging is enabled on the policy and if you are getting connection events ?   Try rebooting the box once and see if it helps . Thanks, Ankita

Hi Deepak, Could you verify the config using the link below  and let me know if it works: https://supportforums.cisco.com/document/102461/how-access-cisco-asa-using-asdm Thanks, Ankita

Hi, Could you try the below and let me know if it works : Regenerate the SF tunnel certificate with "sudo /etc/rc.d/init.d/cert-tun-init" command on sensor cli and then add it again. Rate and mark correct if it helps. Thanks, Ankita

Hi, yes, that is correct settings for only internal web server traffic. Thanks, Ankita