is it possible to add a new route-based site-to-site VPN to ASA firewall that has an existing policy-based running on it? I mean can ASA firewall allow both policy-based and route-based VPN running on it? I have a task to add a new route-based VPN to our ASA firewall that has policy-based VPN running on it already. I am scared, I don't want to disrupt the existing VPN.