I am working with another hosting provider to create a site-to-site VPN tunnel to their side. There is 1 subnet that is currently protected and we are trying to add another subnet to the site-to-site VPN. They told me they added the subnet to the other side and I showed them my configuration before making the changes, that I would add a NAT rule to translate a network to this protected network and then added the new network to the crypto map ACL. After enabling the NAT rule I had no issues. Then I added the subnet to the crypto map ACL as another source and the tunnel went down and wouldn't come up. Only after reverting the changes fixed it. I tried removing the NAT rule and just adding the subnet the ACL and it took it down again. Doing this all in ASDM btw. Any help would be greatly appreciated, I am really stuck.