Creative Cloud for Teams - Activation on Closed Network

We run a CC team account for 48 users, and we are beginning to run into the issue that we are having to manually sign in each machine every couple of months to keep their devices activated.

We are DMZ'd, therefore only have 1 IP that can reach outside the network. We are having to go to each machine and manually change the IP just to get the software to phone home once every couple of months.

What would be a best practice to keep these devices activated? Proxy server for the devices? Manually open firewall ports?

Is there any kind of solution using SCCM to manage the devices?

I appreciate all the help!

Sean