Has anyone tried to front ZCM to the internet across a NAT firewall? If so what ports did you need to open to make it work properly?

Thanks!