vShield logs are not going to help since this problem is entirely VCD.
I would just configure the VPN on each individual gateway using gateway to remote network (in VPN tunnel type dropdown). It's less convenient but it avoids the problem with the java applet occasionally not working