POAs in your GroupWise system should be located behind your firewall. If GroupWise client users want to access their GroupWise mailboxes from outside your firewall using the GroupWise client, you should set up a proxy server outside your firewall to provide access. For more information, see Securing Client Access through an External Proxy Server.
GroupWise WebAccess users access their GroupWise mailboxes through their web browsers, so your web server handles the access issues for such users.