Just discovered that CCA doesn't add route-map to static PAT entries into CLI, like it does on dynamic nat entry. Route-map bypasses NAT for remote VPN site-to-site networks. Without route-map on static-nats, remote users can't access the PATted server IP and port through the site-to-site VPN. If I manually add route-map to the static PAT entry, it starts to work. I just opened a case with SBCS team and asked them file the bug. Has anyone seen this before?
