This may be WAD (Working As Designed), however here is the situation
anll connections across Public Internet:

Connected to middle tier on a VMWare PC with no Novell client, just
ZFD agent. Policies & Apps came down fine. Tried again on test laptop
(with client) - no policies, just apps. Removed client, apps and
policies came down OK.

Looking at the debug logs, it appears that with the client present the
zfd agent expects to be able to use client 32 to connect to the tree
rather than the middle tier, and it never falls back to using the
middle tier when the machine away from the local LAN.

Any advise appreciated.