Hi,
Easiest way is to make port forwarding for ZD in it's firewall (look ports in the ZD manual) . Than SSH to AP, and "set director ip xxx.xxx.xxx.xxx" to ZD site firewall external IP (which has port forwarding to ZD. This works very good, if Internet link is OK.