how to route all traffic across an ssl site to site vpn?

Hi all,

For some time now we've had a red tunnel configured between two UTM home devices that are both behind NAT.  Everything worked fine and we could route all traffic from the LAN on each side across the tunnel and out the opposite device's internet connection by using a policy route.

Lately we have been getting ridiculously slow speeds across the tunnel, and I have a similar tunnel set up with another device in the same city as the original that does not exhibit the problem.  Suspecting something funky about the RED tunnel and the ISP at the original tunnel site, I am trying to switch to an SSL tunnel to see if the problem persists.

But although we have the tunnel set up, i can't seem to get traffic to route across it and out the opposite end - it all just goes out the local ISP as if there is no tunnel or route specified at all.

I've tried putting Internet IPV4 in the network list for the tunnel configuration but that doesn't help.  Have tried it with and without a policy route set (targeting the internal interface of the utm that is across the tunnel) with no effect.

Is there something different about ssl tunnels vs. red ones that would require routing this differently?

thanks!