The next step of the start should produce log entries like ag_iked Got P1 KEX...
If you didn't get this it's a sign that the firewall is not letting port 4500/udp through.
The logs says this now:
ag_iked Got INITIAL-CONTACT message. Ignoring
ag_iked SA's 0x905d8d00/0x8d5d90 set up for 10.172.198.241:* (184.108.40.206:4500) --> (220.127.116.11:4500) 192.168.125.220:1701
ag_iked Creating state for 38688
user <none> selected role _ikerole
ag_iked Got client connection, 18.104.22.168:46051 --> 192.168.125.220:1701
The phone says the VPN tunnel is connected but the appgate client doesn't accept this, It just says Checking... and the same startscreen is visual,
Usernamn:, Authenication Method and the Start VPN button...