Good video @JasonWalker! It is timely. Ironically we just expanded both VPN and DMZ capabilities. The useful trick that I learned was setting _BESClient_Download_Direct to allow clients on the internet to grab their downloads directly.
The items that could be added to make this video even better would be to touch on affiliation setting and also policy actions to handle clients who change between corporate network to VPN to Internet.
Another item that could use clarification is persistence vs command polling for the clients. Are they mutually exclusive? Can they be used together?