[Thorpuse]

The problem is that your SR connection is NATted behind the FireWall's IP address. THe firewall is configured to expect a site-site VPN connection from that IP, not a Remote Access VPN connection. You can resolve this by using a different IP address to Hide-NAT outbound connections, just ensure that this address is outside the encryption domains.