I'm troubleshooting a FlexVPN issue with dual-hubs (Active/Active) and dual ISP at the spokes. Spoke side ISP Failover is based on client block and tracking the hub IPs via ip sla to determine if it's spoke ISP or hub failure.  If the spoke has an IS...

In case anyone else runs into this, I had the issue on 15.7(3)M1 on a C891FW-A-K9 as well.  My RSA private keys were gone after reboot, and FlexVPN connection or SSH wouldn't work of course.   https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvd90410/