...
GEN7-40273
Management is allowed using HTTPS/SSH through a site-to-site VPN policy when HTTPS/SSH Management via this SA is disabled in the VPN policy