Remote connectors feature helps to resolve "QC behind firewall" scenario.
To use this feature you need to install QC Connector Access Service and QC Connector on remote machine.
I installed both components on my Win8 laptop and then created new connection with remote connector on virtual machine with QC. Default port for communication is 8080.
After that I can create workflows and sync steps as usual.