We need Trustsec SXP to ASA via Internet facing Interface for using Security Group Tags in access control lists.
VPN is encrypting traffic to outside interface, the whole SXP connection is encrypted.
Has somebody success in this scenario ? We can see on ASA SYN timeouts, like process is not running on outside interfaces. inside interfaces are ignored by CTS SXP when peer is on other interfaces.
