Is it possible to configure the EUC-Access point behind a firewall with a 1:1 NAT IP instead of setting it up in a DMZ? If so, when deploying the OVA do still configure the public IP in the OVA settings or the internal IP for the external IP?
Yes. Not as secure as DMZ. Set the public IP. The one that clients will connect to from outside
Yes, You can set up the Internet facing NIC of Access Point with a NAT'd address. e.g. if your public IP address is 10.20.30.40 which uses NAT to map to 192.168.0.1 on your internal network, then configure Access Point to have an IP address of 192.168.0.1. You also have to make sure that that configuration items such as pcoipExternal URL use 10.20.30.40.
Mark