qbee.io is designed to offer access across firewall and NAT because qbee is connecting out over port 443 to the qbee server in the cloud. In some network setups there is a proxy server involved to route all communication through that. The qbee agent has proxy support and can thus utilize the proxy for its communication. Please refer to the bootstrap options or the "Using a proxy" use case.
qbee.io supports communication through a proxy. We test with Squid but any other proxy should work as well. Currently we support only http access, but all commmunication from the qbee agent is heavily encrypted anyhow.