.... as against WebAcc (which works) I'd like to allow certain users to carry a laptop with the full client on it.
Obviously I have to open 1677 on our firewall, but what else?