Ok, finally figured it out.  The client VPN settings had "Dynamic Client Routing" setup.  Somehow that was breaking it.  Once disabled the client's SQL application worked as expected.   It just goes to show you, challenge your assumptions!   Thanks for everyone's help.   Cheers, Mike ... View more