Can't ASDM/Piing/SSH my ASA from outside after Dynamic VPN applied

[m.alkhateeb90]

Dears,

As the title imply, after applying a dynamic VPN on the outside interface of my firewall i can't seem to access it from outside, i need this to continue configuring my ASA after migration i'll close the access.

Attached my configuration.

[Rahul Govindan]

Your dynamic map has an ACL that is basically matches any ip traffic.

access-list Outside_cryptomap_65535.1 extended permit object-group DM_INLINE_PROTOCOL_1 any4 any4 

Remove the following statement from your dynamic map as you really don't need an ACL for a dynamic map

crypto dynamic-map Outside_dyn_map 1 match address Outside_cryptomap_65535.1

[m.alkhateeb90]

Thanks for your reply Rahul.

removed the Access list but still couldn't reach it.

[Rahul Govindan]

If there are any tunnels still up, they might have that ACL being used. Just to be clear, if you remove the dynamic crypto map, everything works? And when you put it back it starts failing?

[m.alkhateeb90]

I did clear my tunnels after issuing the command. 

And yes once i remove the dynamic crypto map it starts working immediately. 

What i did yesterday is that i applied a different crypto map to the outside interface by mistake, so i logged back in using the public IP and could retrieve the configuration, once that happened i was sure its the crypto map that is causing the issue. 

[Rahul Govindan]

Can you get the output of 'show run crypto dynamic map', 'show run crypto map' and 'show crypto ipsec sa' with all sensitive info removed?

[m.alkhateeb90]

Rahul,

Attached as per your request.

[m.alkhateeb90]

Dear Rahul,

The issue have been resolved after upgrading my ASA to version 9.6.2, im able to login using ASDM now.

Thanks for your time and effort.

[Rahul Govindan]

Thanks for reverting back. The only other thing I could think of is the bug in ASDM where dynamic map automatically adds an any any crypto ACL which kills traffic to the outside.

https://quickview.cloudapps.cisco.com/quickview/bug/CSCuy41365

[m.alkhateeb90]

Anyone?