Two devices that we (and the associated external companies) want to be able to access over the internet, helpfully both using port 80 among others, without exposing our corporate network to whatever ...