I am not able to remote control users that are over VPN currently. The users have restricted rights over VPN. Using a user code that has full rights to the network over VPN I am able to remote control them. I have read that the default port that ZCM uses is 5950 from the management station to the ZCM agent. Doing a netstat -a on the client I see the management station's IP but the state shows up as syn_received. Is there an up port that it uses that I need to open up as well? We have opened up ports 80/443, 5550, and 2645 from the agent to the server.