Both the SX20 and Touch Panel should be in the same subnet, so, yes, it's porbably best if the touch panel had an IP address in the public segment to be paired with the SX20.
Is there a specific reason they need to have the SX20 outside - could they not use the NAT settings and have the SX20 (and the touch as well) on the inside network?
Wayne
--
Please remember to rate responses and to mark your question as answered if appropriate.
Wayne
Please remember to mark helpful responses and to set your question as answered if appropriate.