Solved Connecting a Client to a Management server over the internet

[Sergeant Steve]

I have two HP Proliant Microservers both running MS Server 2012 Standard, both also running Symantec Endpoint Protection Small Business Edition. One server is staying in my house and that is the Management Server, the other server is going to my Gran's old house and that is a Managed Client. Now obviously the two are designed to be on the same LAN and there doesn't seem to be any way of setting the client to look to the management server over the internet, so I was looking for a way to forward the specific port that they communicate on over the internet to the server in my house.

I've been looking into VPN's and it seems that although they can join the two networks together, everything internet related also goes through the VPN which is NOT what I'm wanting since that slows things down. I want to be able to use the "remote" internet connection for Windows Updates and FTP etc without having to have everything come back to my home network. Sure I can forward the internal communications port to the internet, but without some way of directing the traffic over the internet I'm at a loss as to what to do.

I've had hamachi and Teamviewer mentioned to me, but I'm not really fond of Hamachi since it's quite slow and I'm worried about the potential for hacking since I don't know if it's really secure (I've not looked into it as yet) and I'm not sure Teamviewer will do what I want since it's mainly designed for remote control of computers rather than port forwarding to a specific internet location.

I've emailed the people behind OpenVPN to ask if there's a way I can use their software to only forward specific ports over the VPN, and they have said that I generally can't do this in a VPN setup unless I'm running Linux (in which case I can set up specific port forwarding rules that would bypass the VPN and reach the Management Server on my home network directly).

Obviously I'm not running Linux so it seems I may be at a dead end unless anyone on here has any bright ideas?

 

[Sergeant Steve]

Seems that I may have solved my own problem. There is a way you can update the communication settings on the Symantec Endpoint Protection Client via a package that you can create and save to your computer from the Management server or it's Web Interface, within that package is an exe file and two XML files. Upon opening the relevant XML file, it reveals a "Server Address" Field which was the IP of the server on the LAN. Changing that to the hostname I had set up already for my home network then saving the XML and running the update tool on the client has hopefully allowed the Client to communicate with the management over the internet.