ppm through a firewall works well for me, but I had to ask the sysadmin for the proxy, and then set the HTTP_PROXY environment variable to this proxy.
Ronald