The external gateway you are talking about is probably the Horizon External Gateway URL I am talking about.. You must specify a public FQDN as the External Gateway URL for external access to work.
To solve internal user access, split DNS is recommended. This way the same URL internally resolve to the internal IP address your gateway va is using and your users doesn't have to go via the firewall