In addition, NATs cause additional problems for communication between an external device and a device connected to a protected network (or vice versa).
systems outside the enterprise network are unaware of the ip address of the internal device and hence cannot initiate communication with the internal device.