The VSA module in our 7206VXR was reporting anti-replay failures and users were experiencing loss of service. This was only affecting 1 of 5 tunnels. I've since disabled anti-replay entirely in the crypto map (1024 window size still gave issues) & it seemed to have fixed it. We had no issues previously with the software encryption and it only occurred once we enabled the VSA.
Why are we getting these messages with the VSA? is anti-replay disabled when using software? just trying to make sense of everything.