Hi,
You will need to point the PN client to the external IP address of your Citrix servers as you've got them configured correctly in the office but not when they use the internet!
Alternatively, set up a Web Interface server and get your users to point their browser to WI and log in. Then client the appropriate icon. You can make this more secure with CSG and certificates!
Cheers,
Carl.