Accessing webserver from internal network?

I have a webserver with a public IP address. It works perfect from the outside but I cannot get it to connect internally. If I set it with a local IP and then forward the public IP to the internal IP, it works from the outside and inside both. But when users connect to the VPN, it doesn't. From reading, it seems I I need to have the webserver with a public IP but then have a NAT rule that somehow allows my internal network to connect to it. The weird thing is when I do a trace route, it doesn't even go through the router. It is one hop and that is it. I finally gave up and called cisco and they told me I have to have a switch between the ISP and the router and bypass the router. Is that the only way?

I tried adding an A record and it resolves internally but still doesn't connect. How is this really supposed to be setup?