To not run into the "behind firewall" detection you have to make sure that the address the TMS
receives a request from is the same as it can transparent reach it. A n>m nat would break that.
Also check that all required ports are open, TMS should be fine with SNMP, HTTP, HTTPS, ICMP in both ways.
but for your own management (like debugging via a remote desktop session from the TMS)
ftp, telnet, ssh, ftp shall also be open.
I have seen that a static n=m nat can work, but I strongly recommend that the endpoint IP address
shall not be NATed and that there is a transparent connection in between TMS and the Endpont.
In all other scenarios you most likely run in to trouble, like you see it today.
During Tandberg times we had filed a feature request as I do not really see a reason for the
crappyness of a behind firewall handling. A robust full featured management behind firewall should be possible,
but thats future ware, i would recommend filing a feature request as that would also solve your problem.
