Firewalls often interfere with chat programs like that, usually when trying to directly connect to chat, IM, transfer files, etc. If only one end is behind a firewall, usually that person can initiate a transfer, but not always...tends to be buggy, depending on the firewall. As you mentioned, using ZA is the best bet, as it does permissions based on the application.
/L.A