Is it possible to assign a public ip address out on the internet, then when someone accesses the public internet address, the pix firewall creates a link/route to a machine inside the network to a particular port(say 1234) that allows application management via that port on this 3rd party application? Am I even being clear, probably not. Can anyone help?