Why would you not have your networking team deploy a Cisco ASA / pfSense / OpenVPN to your DMZ?