| Message Code | PIX-3-713061 |
| Severity | Error |
| Description | Tunnel rejected: Crypto Map Policy not found for Src:source_address, Dst: dest_address! |
| Explanation | This message indicates that the Cisco ASA was not able to find security policy information for the private networks or hosts indicated in the message. These networks or hosts were sent by the initiator and do not match any crypto ACLs at the Cisco ASA . This is most likely a misconfiguration. |
| User Action | Check the protected network configuration in the crypto ACLs on both sides and make sure that the local net on the initiator is the remote net on the responder and vice-versa. Pay special attention to wildcard masks, host addresses versus network addresses, etc. Non-Cisco implementations may have the private addresses labeled as proxy addresses or red networks. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.