Resolved! Phase 1 is down but phase 2 is up- test vpn phase 1 and 2
we have tunnel from PA to vendor which is using Cisco ASA.
When there is no interesting traffic tunnel is down by design this part is ok.
but today i saw phase 1 as red and phase 2 as green on gui.
I did the
test vpn ike command and phase 1 was green
...