USG-->Pfsense as VPN gateway - one lan interface | TLS Handshake failed and No route to host code-65

[dfavata]

Folks, quick setup summary.
Ubiquiti USG3p as default gateway 10.74.85.1
PFsense as VPN gateway 10.74.85.3
I've setup port forwarding to the PFsense from the USG. the PFsense does see the outside clients try to connect but i get a TLS Handshake error from outside clients,

Aug 22 15:48:41	openvpn	80819	publicip:53224 TLS Error: TLS handshake failed
Aug 22 15:48:41	openvpn	80819	publicip:53224 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)

Internal Lan clients and VPN clients can talk. so the VPN server itself is up and running and accepting the TLS code from the laptops.
I'm using a cell phone as a hotspot for testing the outside W10 clients. which shouldn't be an issue.
I'm at a lost as to why the TLS is giving me errors.