We have this same problem between an NSA3500 and TZ215. Let me know if you make any headway. I have logged a case with Sonicwall Tech support (useless) and they mention it is not possible to have multiple SA's for the same remote gateway even if the local endpoints are different.