Symptoms
The connection table and IPsec ALG profile stats may indicate that the IPsec tunnel has been established, but traffic may not be passing through it.
Impact
Connections going through the IPsec tunnel may fail.
Conditions
This may occur on appliances when the IPsec ALG is used with default DAG and the sys db variable ipsec.lookupspi is disabled.
Workaround
Ensure the db variable ipsec.lookupspi is enabled.
