My organization has one Domino server in our main office, and one located in a field office. We have installed a second Domino server at the main office and installed IBM Traveler on it. The server is behind the firewall and is not outward facing. At this point, I can connect to the server with an android device on the local network. The goal is to be able to access the traveler server with iOS devices from outside the local network.

I am not well versed in reverse proxy or DMZ, so part of my problem is I am not sure I know what questions to ask. Google has not helped me clarify matters. 

Is there an option that allows us to keep the server behind the firewall and still provide access to devices outside? Does MaaS360 help with that? Or will our VPN take care of that?

iOS appears to require a certificate and SSL. Can that be a self-signed certificate accessed only from the local network, or do we have to get a third-party certificate? How do I get a certificate for an internal domain that is not outward facing?

Is there a contact at IBM that we can call who can help us get this set up?