All of my media agents are in the US. I'm sure you've heard this, but Galaxy is heavily dependent upon a solid DNS infrastructure. The MA's have to communicate with the CS, no way around that. You might want to try to set up a data interface pair between the CS and the MA's using the IP addresses instead of the DNS names.