All the IT guys need to do is open up port 5989 to give you access to the BCM. Unfortunately you won't be able to get into the voicemail though. It requires port 443 but they usually already use that for themselves. Why Nortel chose the default FTP port is anyone's guess. If their internet connection has multiple public addresses and there is one not being used, you can ask them to dedicate it to the BCM, then you could forward 443 from that address.