TZ170 Enhanced Configuration:
First add Address Object to define remote network.
Make sure that the zone type is VPN, and that you add a network type object.