ZCM 10.1.3, SLES 10 sp 2 on VMWare
Multiple WinXP SP2 and SP3 clients

Agent login works fine internally, but not externally. When trying to
log a user into the agent from an external client, I get the message
"Unable to log into the network because the login credentials or the
server certificate is incorrect."

Remote Management and inventory work and can reach server by DNS name
both internally and externally.

I am able to browse to the management page
(https://<myserver.mydomain>) from an external client with no
certificate errors. I cannot, however, browse to
https://<myserver.mydomain>:2645/CasaAuthTokenSvc from an external
client. ("Internet Explorer cannot display the webpage.") A packet
trace shows traffic on port 2645 at the server and the client.

Any ideas?