IPSec, iPhone, enc0 interface issue

[casdmg]

I am probably missing something quite simple here but I can't seem to wrap my head around it.

Iphone is able to authenticate to pfsense box without any issue.  The problem in my setup appears to be the traffic being passed through the enc0 interface.

Things I have done

1. Rules -> IPSec Tab
Added rule to allow any source/dest + any protocol

2. NAT
Added outbound rule to allow 192.168.100.0/24 (virtual network) out the WAN Interface, although the traffic does not appear to be getting this far.

3. IPSec
This part seems to be working.  I am able to authenticate and recieve an address from the virtual ip range.

Capture from the ipsec interface (enc0) - shows my outbound DNS request
14:25:41.413463 (authentic,confidential): SPI 0x08c73051: IP 192.168.100.6.61942 > 8.8.8.8.53: UDP, length 30

But the firewall logs shows it being blocked on enc0
May 30 14:26:15 enc0  192.168.100.6:61942    8.8.8.8:53  UDP

Are there any other steps that need to be taken?