No Upnp support. The pix can do all kinds of port forwarding. I am not familiar with remote web workplace, so I cannot say if it will work. If it simply needs one port to be forwarded (it sounds like it is something that would run on http, and thus you would just prepare the pix for it as you would for any other web server), you should be fine. If it dynamically needs multiple ports negotiate, the pix won't support it (unless Cisco updates PIX OS to have a proxy for it, a la H323, SIP, FTP and other annoying protocols)