A system, comprising: a translating device (PASS), comprising: a processor; a public network connection to a public communication network; a private network connection to a managed private communication network; and wherein the translating device is associated with a single resource locator of the public communication network that a requesting initiator device coupled to the public communication network uses as destination information when sending messages to the network translating device at the public network connection; a valid user equipment database for use in translating an action request message directed to the resource locator from the requesting initiator device into an action request message directed to one of a plurality of private network addresses corresponding to one of a plurality of managed devices of the managed private communication network, wherein the one of the plurality of managed devices of the managed private communication network does not have a public network address associated with it, and wherein the valid user equipment database includes an association of a set of security credentials of the initiator device, transmitted in the action request message, with the one of the plurality of private network addresses that corresponds to the one the plurality of managed devices of the managed private network, and wherein the processor is to determine, from the valid user equipment database based on the set of security credentials received from the initiating device in the action request message, the one of the private network addresses to direct the action request message to, wherein the set of security credentials is uniquely associated with the initiator device in the valid-user-equipment database. a translating device (PASS), comprising: a processor; a public network connection to a public communication network; a private network connection to a managed private communication network; and wherein the translating device is associated with a single resource locator of the public communication network that a requesting initiator device coupled to the public communication network uses as destination information when sending messages to the network translating device at the public network connection; a processor; a public network connection to a public communication network; a private network connection to a managed private communication network; and wherein the translating device is associated with a single resource locator of the public communication network that a requesting initiator device coupled to the public communication network uses as destination information when sending messages to the network translating device at the public network connection; a valid user equipment database for use in translating an action request message directed to the resource locator from the requesting initiator device into an action request message directed to one of a plurality of private network addresses corresponding to one of a plurality of managed devices of the managed private communication network, wherein the one of the plurality of managed devices of the managed private communication network does not have a public network address associated with it, and wherein the valid user equipment database includes an association of a set of security credentials of the initiator device, transmitted in the action request message, with the one of the plurality of private network addresses that corresponds to the one the plurality of managed devices of the managed private network, and wherein the processor is to determine, from the valid user equipment database based on the set of security credentials received from the initiating device in the action request message, the one of the private network addresses to direct the action request message to, wherein the set of security credentials is uniquely associated with the initiator device in the valid-user-equipment database. <EOS>