it was my first guess … but I think routing to ipsec network devices should be creating automaticaly. I consider to set it manually but there is a note
Do not enter static routes for networks assigned on any interface of this firewall. Static routes are only used for networks reachable via a different router, and not reachable via your default gateway.
hmmm ???