[David Maayani]

assuming cloud firewall is directly on the internet and not behind NAT?
assuming cloud firewall is static address?

have the onsite sonicwall be the initiator for the vpn, not both sides.

SSL vpn should be fine. IPSEC will get finicky