Multiple VST Connect connections from 1 facility possible?

Both assumptions are correct.

We forwarded 5111-51113.

I am in direct contact with the firewall admin, so we can make alterations, but these need to be simple rules which we can turn on/off between sessions.