Often we install systems that can be connected to a network, then, after forwarding a port to a LAN IP address, they can be remotely programed. Sometimes I just do it myself, but if another company handles the network, then I have to go through them...

Most of the time, I have no problem getting cooperation from the network administrators when it comes to this, but I have had some that hem and haw about doing it (If they think we are bad about being secretive, we have nothing on some of them!)

Anyways, I was wondering, am I really creating that big a security risk by forwarding a port to an inside IP address?