We are deploying web applications in java using tomcat on client machines across the country.

Once they are installed, we want to allow a remote access to these web applications through a central server, but we do not want our clients to have to open ports on their routers.

Is there a way to tunnel the http traffic so that people connected to the central server can access the web applications that are behind a firewall ?

The central server has a static ip address and we have full control over it. Right now, it is a windows box but it could be changed to a linux box if necessary.

Our clients are running windows xp and up.

We don't need to access the filesystem, we only want to access the web application through a browser.

We have looked at reverse ssh tunneling but it shows scaling problem since every packet would have to pass through the central server.