Hi Boris, Thanks for super quick response! I'm sure there would be FW capabilities in ASA which would be missing in other IOS routers, so we won't be able to offload everything from ASA. Your other solution sounds plausible to me, however I am concer...

Hi Rahul, If VPN tunnel is terminated on ASA and GRE tunnel is terminated on a router behind ASA, then the firewall rules which could be applied to the data traffic coming out of VPN on ASA are no more relevant. Is there a way to overcome/workaround ...