Your users have some issues connecting with Mobile Access VPN to your gateway. How can you debug the tunnel establishment?
run vpn debug truncon
in the file $VPNDIR/conf/httpd conf change the line Loglevel To LogLevel debug and run vpn restart
in the file SCVPNDIR/conf/httpd conf change the line Loglevel To LogLevel debug and run cvpnrestart
run fw ctl zdebug -m sslvpn all
Submit