I heard people mentioned that server initiated connection can also use 5500+N for accessing different PCs behind the firewall, but my personal experience showed it didn't work. Server initiated connection seems only communicate through port 5500. But, I'm only using free edition. I don't know if there is more advanced option in the paid version. BTW, I also heard you could use SSH tunnelling to make VNC works better and safer. Maybe you can look into that area. I don't know much about SSH, so I can't help you there.
Good luck.
Man, what are you trying to do?