Thanks for the output. You have quite a bit of overruns on your inside and outside interfaces. We need to determine if this is actively happening  or if its old data. Can you collect the following?show trafficshow clockshow proc cpu-hogFollowing outp...

Hi Sergey. Can you post the CPU profile output? The total command below would be useful also.show memshow run threatshow interfaceshow service-policy globalcpu profile activate 18000 (wait 3 minutes)show cpu profile dump clear cpu profile dumpshow co...

Kevin,You can also take a look at this documents on how the PIX/ASA handles ICMPhttp://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094e8a.shtmlTry enabling logging to the buffer also to see if there are any related mess...

Can you share an example of what you have configured? It would help to have more information.

Need to see the configs of both ends here. Should check to make sure that SA lifetimes match, ensure there are no NAT issues and etc...  Typical site to site VPN would look like thisSITE A: crypto isakmp policy 10 encr 3des hash md5 authen pre-sha!cr...