Isn't it possible to use remote resktop via SSH (tunneling?) I did not test this my self but it should be possible to map a local port to the terminal service port on the server and use ssh to tunnel trough the firewall. Looks to me that this is much safer but maybe too slow????