If you're connecting over the internet without a VPN or SSH tunnel then you're requiring databases be open to the world, regardless of any firewalls that sit in front of it. Having worked on the infrastructure side of things I can't imagine that any serious companies would be amenable to such an arrangement.