Bug #8686
Updated by Jim Pingle over 6 years ago
Traffic entering an assigned VTI interface never hits firewall rules on that specific interface tab even if they are present. Traffic must still be passed on the main IPsec IPSec tab. This is potentially confusing, it's not the expected behavior behaviour that other interface types exhibit.