We had a similar problem with one of our warehouse locations after switching to AT&T Business Fiber. IPsec site to site VPN to our head office would randomly stop passing traffic, traffic outside the tunnel was fine. For us, the issue was fixed by disabling ESP ALG on the AT&T gateway.