In recent months, I've been very busy working with ZCM. In the coming weeks and months I will start sharing my war stories here.
To start with though, I built my ZCM demo server from scratch yesterday. It's a bog standard 10.0.2 server but has a NAT'd connection to the Internet.
After opening up TCP Port 5950 to the server, I can now remote control the Primary Server over an Internet Connection. I tested this further by Collaborating in a single remote control session with Shaun Pond and Laurence Pitt, both where sitting in there home offices. It worked an absolute treat.
So if you are using ZCM in a Internet-facing environment, or even just NAT'ing between sites, a known IP address at one side and an open port is all you need.
The known IP Address is important, the Primary Server has a static NAT address. In most scenarios, an administrator's workstation will not have a static NAT; so to remote control a user outside the firewall requires the user to request a session from a known address.
Is anyone out there using ZCM to manage users outside the firewall?