As a general rule of thumb I recommend enterprise endpoints use private IP addressing and use a hide nat. I have encountered an organization which uses publically routeable IP addresses for their desktops. In addition they allow (upon request) inboun...