Replicate a Disribution Point behind firewall

Contributor II

Hey all, can't seem to find this in the documentation or the Nation here.

I have a primary Distribution Point in a colo, and I want to put a secondary DP on a Mac Mini Server behind a firewall at a satellite office.

I'm thinking I need to set up port forwarding on their firewall/router appliance for ports 22 (ssh) and 548 (afp).
Anything else?

Has anyone done this? Any hiccups I should be aware of?