Problem encountered in FIM Password Reset

Hi everybody.
I have been using FIM Self Service Password Reset (FIM SSPR) and it requires that someone sets password using a domain and join the organization from the Cyberspace. We would like to continue investigating this alternative in order to determine if it is feasible or not.
During my research I only managed to partially get it to product by featuring an unsealed opening 5725 and 5726 to an outer coat FIM surround. This is really complicated for the users because after answering the presented question it fails with Error Code 997:

