Hey Garrett,
I finally got it resolved a week or so ago. I made 3 changes and now I am able to remote control devices outside our network via CSA.
1. Trusted Services - I had my appliance hardened to not allow HTTP (port 80). From what i found out, the remote clients talks on port 80. So allow Port 80. When connections are established, it goes to HTTPS (Security > Trusted Services)
2. Allowed Address - Make sure to allow 192.168.0.0/16. Most home users are on 192.x.x.x. So if you deny then, well.. they can't get in. I hope I am understanding this properly.
3. Additonal Host Name on Gateway services Page - Make sure to put the public IP for the CSA box, as well as the FQDN for the server.
I did all these changes at the same time, and I was able to sucessfully see and remote control devices outside my network.
I didn't have time to see which change was the exact fix, but well.. it works. Please report back and let us know if it works for you.
- Ton