Hi I had the same problem.I solved it by this way:1. on bouth sides in
VPN - IPsec Tunnels i have to add in Phase 2 Selectors new address
maping - on HQ: Local Address: 0.0.0.0/0.0.0.0 , Remote Address: address
range of branch office- on Branche Loca...