If I understand your diagram, I would bridge the three LAN-LAN VPN in ZS (witch you have done).
Make sure that the IP Address assigned to the Bridged VPN and the IP Addresses assigned to the Client Sites VPNs are in the same Subnet.
Create Static Routs through the Bridged VPN and Vis Versa.
