Does the VPN server for C2S still have to have a public IP address or
can it now be NATTED?

I thought I read this was a new feature of v3.8. If so, is there
anywhere in the doco or Craig's book that discusses this setup.

Regards,
Dale Bentley