We use VPN site to site set up in our company.

We have a border manager server on another company's LAN behind their

firewall. They are running a Cisco router and nat. We have a public
address and they have assigned it on the router. Will 3.8 allow our border server behind a firewall and behind nat to be a slave server in
site to site configuration?

We have a master server at our corporate office and would like to use
company's T1 but are unsure if keys can be exchanged through the cisco

applicance running NAT at the remote site.

Any help is appreciated.