...
NAT: Network Address Translation should not be utilised. If used it MUST support all services including: VPN (such as PPTP, IPSec and L2TP), video conferencing and other services with sufficient address space not to impact the usability of services. It is permissible to have a 
if NAT is utilised. Use of IPv6 is encouraged.
All Ports: Establishment of outbound connections must be allowed to all ports.
...