Our Control Center is not inside the DMZ, it is on our core network and the gateways are in the DMZ.  It does not look like we can use Customer-specific Spam Submission Settings through a proxy (or through the gateways).  Is this true?  If so, is this something that may change in future versions?  Opening up ports directly to our core network is not a good thing (and a bad suggestion from a security company like Symantec).  

Thoughts?  Workarounds?

Thanks in advance.