so in my scenario I will define a static route on FW like ip route 172.16.1.0(PC IP) 255.255.255.0 10.10.10.2 ( Next hop IP)

but if I use a static route to remote network then I will be able to ping the other side thru the route not by the VPN?

I need a route because I am testing the VPN with private IPs ?? Once I connect through the internet I dont need a route right ? I mean if I have 2 public IPs and i am going to use it as Peers for the FWs then I wont need to define any routes?

Yes thats my other question do I need a static route? because I am establishing a VPN do I still need a route?

kindly see the attached file for logs. SSL session with client inside:192.168.1.10/49814 to 192.168.1.1/443 terminated User 'enable_15', running 'CLI' from IP 0.0.0.0, executed 'ping 172.16.1.1'User 'enable_15' executed the 'ping 172.16.1.1' comman...