Just to make things clear for others that may find this thread.   Marketing and Development position FlexVPN as a Remote-access and possibly a simple hub-and-spoke only site-site solution.  DMVPN is positioned as the site-site solution including ever...

I went over your setup with a TAC Firewall expert and we feel that what you have configured should work.To continue with the troubleshooting you will need to turn on debugging, so we can see why it is not matching the FW_ALLES_ERLAUBT_INSPECT2class. ...

A decent quick note, but it could be improved by adding the following:Add recommended tunnel interface commands:     ip mtu 1400     ip nhrp holdtime 300     ip tcp adjust-mss 1360     ipv6 mtu 1400     ipv6 nhrp holdtime 300Add an example of 'show i...

The restriction,"You cannot configure a per-tunnel QoS policy on a tunnel interface and a separate QoS policy on the outbound physical interface at the same time."applies to the actual outbound physical interface for the GRE/IPsec tunnel packets, whi...

# 7. what type of design allows for two ISP's at our remote offices to carry separate traffic (one ISP for data, one ISP for voice) each spoke connecting one tunnel back to two different hubs and allow for redundancy for failover.In this case you wou...