vShield Edge IP-SEC setup to allow IP-SEC initiation from "internet"

I need to establish an IP-SEC VPN from Internet "any dynamic IP adresses" to an vCloud Director "Org Network".

I thought it's simple... Just use 0.0.0.0 as Peer IP and use a Policy for all 3 Possible Remote Network Ranges (private A,B and C)

But i'm not able to establish IP-SEC Tunnel in Phase 2.

Does anybody successfully established an IP-SEC from "internet" (IP-SEC Client such as Shrew Soft) with an vShield Edge?

Thanks

Dominik