So, such a solution is presented for the bug associated with the problem of removing the reverse-route after cleaning the IPsec SA.
Basically what is recommended - is to reload your router on daily basis with help of EEM script.
OC from bugsearch
Workaround: Reload the router to alleviate this symptom temporarily. One
possible workaround would be set up an EEM script to reload the device at
night. In this case, the reload should occur at 3:00 a.m. (0300) in the
morning. For example (the syntax may vary depending on the versions used):
###########
configure terminal
!
event manager applet SR_000000526
event timer cron name SR_000000526 cron-entry "0 3 * * *"
action 1 cli command "en"
action 2 cli command "reload"
!
end
###########
