A Check Point R81 cluster uses a route-based VPN with a VTI interface to a remote peer. Users report that tunnel traffic intermittently fails, and the administrator observes that the VTI interface state is DOWN even though IKE Phase 1 and Phase 2 report success in 'vpn tu'. Which action is the most appropriate next step?