A. The customer can sign into the Oracle Compute cloud and create a security list. The security list can create a port forward for inbound and outbound traffic through the cloud.

B. Use the Enterprise Manager Database Control interface to change the standard port from 1158 to one that can be supported by the customer's firewall. Use Enterprise Manager Database Express to change its port from 5500 to one that can be supported as well.

C. Create a custom security rule in the Oracle Compute Service to redirect the ports of both Enterprise Manager Database Control and Enterprise Manager Database Express to port 80, which is always allowed.

D. The customer will need to wait for their network group to make a decision and open the ports for them.
There isn't any other way to access these applications securely in the cloud.

E. Use a supported SSH client to create tunnels for the restricted ports over non-restricted ports.