1. Configured as specific static route
Intranet
Router HQ
Internet
Router
AS-IS 2M
a.a.0.0/16 only
ASA01
Configured as specific static route
to connect HQ
a.a.0.0/16
Branch Office Users.
a.a.0.0/16
Branch Users are using the service via ‘Intranet Router’ to communicate HQ IDC server farm for their Job.

2. Configured as specific static route
Intranet
Router HQ
Internet
Router
To BE HQ
Default route
Established new L2L tunnel only specific source 2M
a.a.0.0/16 only
Only b.b.0.0/16 need to pass this Tunnel
ASA01
Configured as specific static route
to connect HQ
Branch Office Users.
b.b.0.0/16  New networks are in placed.
Recently, b.b.0.0/16 has been placed on branch office users. That network have to communicate HQ via new VPN tunnel not
existing leased line since some reason
Q. To archive above diagram, we need to configure PBR(policy-base-routing) at ASA. Does ASA support PBR?
Q. If just established the L2L between HQ and BR, the traffic matched ACL pass via new VPN tunnel automatically?