Cannot connect to VPN after change to config of UC520

I made a mistake by changing the VPN dhcp scope in CCA.  Apparently the UC520 was configured in CLI.  Anyway, when I applied the change, it said it didn't recognize the VPN server setup and the Firewall configuration.  I lost internet but not phones.  I also lost the ability to connect to the VPN from outside the network (it does connect if inside the network).  I compared the CLI config (show run) to the previous config and there were some differences.  Once I had added the missing items back in, I got all functionality back except the ability to connect to the VPN from outside the network.
I think the problem is in the firewall / Access Lists.  Some of the entries are missing.  Usually the ones that say "auto generated by SDM firewall configuration...."
I added the commands back but it didn't matter.  Probably because they were auto generated.  i just don't know how to generate them.  I didn't set this up originally and am not an expert at the UC520 (obviously).
I am attaching the Original configuration and the current configuration.  Like I said, I compared these and tried adding in the missing access-list statments but it didn't work.  
(Note: I had changed some DNS servers so those will and should be different on the 2 configs.)
Any help would be greatly appreciated.