sysopt connection permit-ipsec Command
The sysopt command reconfigures the system options. The command sysopt connection
permit-ipsec implicitly permits all packets that arrive from the IPSec tunnel to bypass any
checking of access lists, conduits, or access-group command statements for IPSec
connections. If the sysopt connection permit-ipsec command is not specified, an explicit rule
(conduit or ACL) must be coded to allow the traffic arriving from the IPSec tunnel through
the firewall.