Re: Help with a security policy issue

I agree this is most likely a missing or incorrect route.  Run this on the cli

get route prefix 192.168.222.0/24

confirm that the whole subnet is correctly pointed to the expected tunnel interface and no more specific routes are in place that would direct portions elsewhere.