Aliases no longer working...

I must just be over looking something so I'd appreciate another set of eyes. I have two pfsense systems, connected by a ipsec tunnel. I've had rules in place for years that allow a client at site A to reach a server at site B. Today, I had to reboot the pfsense system at site B, and after it came back up, I would no longer reach that server. When I look at the firewall logs from pfsense at site B, I see that my traffic is matchign the block rule at the bottom of my rule set. It should be matching an allow rule that includes the destination server in an alias....but it isn't. If I clone that rule, and change the destination only to explicitly match the destination server IP, it works...

Here is the log event I see: https://i.imgur.com/3dqulM1.png

The ruleset on the interface If I enable that "temp" rule, things start working. With it disabled, I cannot access the server at 10.20.20.16: https://i.imgur.com/1nPP1Zg.png

The "IPSec_Allowed_Destinations" alias: https://i.imgur.com/CC3d2fu.png

What am I missing?