Error when connecting to farm over AG from outside

[Palagast]

I have a PS 4.5, a machine with AAC, a machine with WI 4.5 and an access gateway 4.5. All on an internal network, all connected with one interface (including the AG). From outside, coming in with NAT through a router, any user can connect to the AG and login from there. After getting the Farm Published Apps, clicking one results in the error "Cannot connect to the Citrix Presentation Server. There is no Citrix SSL server configured on the specified address".
The DMZ settings on the WI machine are "Gateway Direct" (not sure if this is the right one, but I've tried all 6 options and none work).
Internal users can use the same apps without problem.
This is a new setup of all included components but the router, so it didn't work before.

Any tips or pointers on where to look?
Thanks in advance.

 

[Dublin73]

Can internal users connect using your access gateway, as opposed to just typing in the web address of your web interface or AAC server?

Do you have your access gateway configured to use SSL (https) to communicate with the PS 4.5 farm?

 

[Palagast]

Dublin73,

Thanks for your reply.

Internal users van connect through the gateway fine when I set the WI DMZ settings on Direct. When I use the Gateway Direct setting, they get the same error as external users.

The gateway has been configured using both normal and secure communication (I take it you mean the Farm properties in the AAC?).