Have you considered putting Agent Handlers up with access to the internet? This would ensure that your main ePO server still is not internet facing but agents out on the internet could still get their task/policies and drop events/system details back to your Agent Handler for viewing in ePO.
thank you for your reply, but it's unclear for me, what you mean with: "putting Agent Handlers up with access to the internet".
I think, I have to search for (and read through) more information regarding this subject. Thank you for your hint.