Normally when you have a VPN involved and you have one way voice, it's either:
-Firewall blocking RTP ports (16384-32767 UDP)
-VPN is allowing direct connectivity between endpoint and CUCM, but not endpoint to another endpoint (RTP stream)
In this case the RTP stream from phones on the CUCM side aren't making it to the SwitchVox. Make sure the default gateway of the IP phones can ping the address of the SwitchVox.
You can also take a look at the SIP signaling (either on the pbx or in CUCM detailed traces) to see if the incoming INVITE or ACK from the PBX has the correct media address in the SDP.
hth,
nick