Firewalls: We use palo alto on both subnets for the building-level firewalls, we’ve opened up all port 80 and 443 between their subnet and server sccm1.site1.domain.edu in both directions. I’ve also opened up all traffic from the customer’s subnet, to server sccm1 with Windows Firewall as an incoming rule.