to check whether you have gateways with partially overlapping encryption domains
On the MDS / Smartcenter Server
#mdsenv CMAXXX (if you have provider-1)
#vpn overlap_encdom
it wont show firewalls Interfaces IP addresses that are part of the vpn domain implicitely