Anywhere Access using domain.local

For obvious security reasons I don't want to open any ports in our router, but Anywhere Access seems intent on forcing me to do so.

All of our remote users will be using a VPN client (probably Hamachi or similar), so we don't need the public subdomain model that AA appears to require. In fact we specifically don't want to.

I've tried running the configuration wizard using domain.local and importing the CA that was generated during initial server setup. The setup wizard made it all the way through but displayed these errors at the end:

1. There is an error in your Remote Desktop Services setup
2. Anywhere Access to your server is blocked
3. There may be more than one router on your network

#3 is certainly true, as I'm using a subnet for my staging operations so the production network can stay in operation while I configure this replacement server.

Is there any way to force AA to use domain.local and ignore the network topology (router/subnet)?

If there's no way to back this out I may just have to reinstall the server OS clean. Hopefully I won't have to do that.

Is there a way to skip AA and just use plain ol' fashioned RDP sessions?

Thanks,
Jeff Bowman