Cisco sysopt

Allow packets from an IPsec tunnel and their payloads to bypass interface ACLs on the security appliance.
IPsec tunnels that are terminated on the security appliance are likely to fail if one of these commands is not enabled.

sysopt connection permit-ipsec
sysopt connection permit-vpn

Additional Commands :