A system for remote communications between private users through a public network while providing seamless, firewall-compliant full duplex connectivity, said system comprising: - a client computer (12a-12n) securely connectable to the public network through a first firewall element, said first firewall element adapted to protect said client computer (12a-12n) from hostile intrusion from the public network; - a device control computer (36a-36n) securely connectable to the public network through a second firewall element, and at least one network-enabled device privately networked to said device control computer, said second firewall element adapted to protect said device control computer (36a-36n) and said at least one network-enabled device (18a-18n) from hostile intrusion from the public network; and - a distributed control infrastructure (48, 56) comprising a primary connection server operatively coupled to the public network and at least one secondary connection server (14b-14n) operatively coupled to said primary connection server, - said at least one primary connection server including means for forming a secure, first firewall compliant connection with said client computer (12a-12n), and means for forming a secure, second firewall compliant connection with said device control computer (36a-36n) and said at least one network-enabled device (18a-18n), means for sending communications from said client computer (12a-12n) to said at least one network-enabled device (18a-18n) via said device control computer (36a-36n) while maintaining second firewall compliance, and means for sending communications from said at least one network-enabled device (18a-18n), received from said device control computer (36a-36n), to said client computer (12a-12n) while maintaining first firewall compliance; wherein - said distributed control infrastructure (48, 56) comprises a load balancing algorithm adapted to assign communications, initiated by said client control computer (12a-12n) or said device control computer (36a-36n), to one of said connection servers (14a-14n) when said client control computer (12a-12n) or said device control computer (36a-36n) has been verified, - wherein said load balancing algorithm assigns the communications based on user type, session type, availability of said connection servers (14a-14n) and relative current workload of said connection servers (14a-14n). - a client computer (12a-12n) securely connectable to the public network through a first firewall element, said first firewall element adapted to protect said client computer (12a-12n) from hostile intrusion from the public network; - a device control computer (36a-36n) securely connectable to the public network through a second firewall element, and at least one network-enabled device privately networked to said device control computer, said second firewall element adapted to protect said device control computer (36a-36n) and said at least one network-enabled device (18a-18n) from hostile intrusion from the public network; and - a distributed control infrastructure (48, 56) comprising a primary connection server operatively coupled to the public network and at least one secondary connection server (14b-14n) operatively coupled to said primary connection server, - said at least one primary connection server including means for forming a secure, first firewall compliant connection with said client computer (12a-12n), and means for forming a secure, second firewall compliant connection with said device control computer (36a-36n) and said at least one network-enabled device (18a-18n), means for sending communications from said client computer (12a-12n) to said at least one network-enabled device (18a-18n) via said device control computer (36a-36n) while maintaining second firewall compliance, and means for sending communications from said at least one network-enabled device (18a-18n), received from said device control computer (36a-36n), to said client computer (12a-12n) while maintaining first firewall compliance; wherein - said distributed control infrastructure (48, 56) comprises a load balancing algorithm adapted to assign communications, initiated by said client control computer (12a-12n) or said device control computer (36a-36n), to one of said connection servers (14a-14n) when said client control computer (12a-12n) or said device control computer (36a-36n) has been verified, - wherein said load balancing algorithm assigns the communications based on user type, session type, availability of said connection servers (14a-14n) and relative current workload of said connection servers (14a-14n).