I tried every combination of vpn policy as well and just assumed it was still broken because nothing would make it work.