Everything seems to be configured properly and TS and/or VDI machines can be connected internally, but not through Secure-IT.
Secure-IT machine is configured properly as well and users can connect and see published apps. However, attempts to launch any of these apps is failing with error "Remote Desktop can't connect to the remote computer for one of these reasons:" (list of reasons follow). Secure-IT machine is located in DMZ.
This can be caused by Firewall rules between DMZ and LAN
One of the crucial Secure-IT services is RDP proxy.
This service extracts RDP connection from SSL tunnel and routes it to the target server (TS and/or VDI). This is also requires to create an appropriate rule for port 3389 between Secure-IT server and all target servers.
To verify that rule is working - just open Microsoft RDP client (MSTSC) on Secure-IT machine itself and try to connect to the target server's IP.
Also, please make sure that software firewall on Secure-IT machine (if used) does have exclusion rule for pnsslsvc.exe process.