[brycec]

A possible answer for linuxsrc...

Have you defined your encryption domain on the firewall?
In global properties for the firewall object will be a VPN section in which you need to define your encryption domain. You have two options, create a group object of ip ranges or simply choose the default option which means the firewalls encryption domain is every interface on the firewall (except the external one).