[mcnallym]

You need to ensure that your Desktop Policy allows you to connect to the internal network with an unencrypted connection. At the moment your desktop policy won't.

There is an option in the Secure Client Packaging Tool for

Allow clear connections for Encrypt Action when inside the Encryption Domain.

You need to enable this so that your Encrypt Action on your desktop policy will accept an unencrypted connection when you are inside the encryption domain.