I was a bit worried about how this would work on a company intranet. I know my IT network security people are pretty paranoid about bridge networks and all that. Looking at Sauce Connect[1], they recommend to put the service on a dedicated machine on your intranet that you can zone off so it only has access to the parts of the network you want to allow.
Seems like a decent solution to allow a running a cloud service behind a firewall.