The NSD tunnel to is down due to an IKE version mismatch.
NSD through Gateway.
The NSD via VeloCloud Gateway is confgired for IKEv1 when the peer is configured for Ikev2.
Ensure the VPN configuration on the peer device aligns with the NSD parameters defined on the VCO.