[northlandboy]

What topology do you have configured for SecureClient? Manual/automatic?

Is your encryption domain meant to be just the DMZ interfaces?

When you try and create a tunnel remotely, what happens?

I suspect you may have some issues going on with link selection - you've probably got the 192.168.50.x cluster IP as the primary IP of the cluster object, which is why the internal system can connect, but not the remote one.