Not sure if this is the right forum for this question, but here goes...
Our Zenworks 11 environment is completely behind our firewall, and kept internal.
We do have issues with people off site updating their password, and then getting out of sync with Zenworks, as they are not able to phone home. Some use VPN, but not all, and we do not wish to rely on it.
The solution would obviously be to open some ports to allow the client to get the updated password from the server. We don't wish to open up the whole thing externally.
I've look at the list of ports used, and from what I can see, the servers would need to have TCP 80 and 443 inbound, and 2645 outbound.
Anything else that would be needed?