PCAnywhere behind Netware 6

I have a couple customers with multiple IPs going through Netware Static NAT mapping to a PCAnywhere host on the network. This works, but the host PC’s are wide open on the internet and I’d like to secure them. I tried following TID10024898 but then I could not access PCAnywhere or Netware remote management from internet, or browse internet from workstations. I know we could just install Zonealarm on the PC’s, but I’d like to lock it down once at the server instead of configuring firewalls on multiple PC’s. Also have the same situation with a Netware 4.11 server running Bordermanager, not sure which version, I think 3.0