I used the following workaround :
Create one ftp referential to my nat Ip that's only used by replication task.
Create one superAgent repository with real IP of superAgent on the Nat subnet, so that clients can update.
Exclude the superagent repository from reports of failed replication.
Guess it's not very proper, but work's fine.
If anyone has better solution , i 'm still listening