I had this problem also with anyconnect and iPsec running on the same CSR. Single interface. It started happening when we broadened the size of  source address for the IPsec tunnel, that connected to the clients enterprise, from one that did not over...

Hi, your trace from inside the network should drop at least at routerb when Ispa is shut down. Make sure your ispb is not applying a no advertise or no export community to the default they are advertising. Sent from Cisco Technical Support iPad App