New user needing help with a Windows based IT guy

New to the forum and I've got a couple questions regarding using a Citrix firewall when connecting to a database from the outside world. I am just a consultant and the IT guy who works up there is a security nazi. No computer outside the citrix firewall can communicate with the server.

Now what I am doing is trying to figure out how the users will be able to download files from the database if no one can connect to the server from the outside world.

I have tried to get the clients to agree to use linux on this server and take it out of the Citrix firewall, but the IT guy is railroading me talking about security . They use Windows Server 2003, but he won't agree to take that off the Citrix platform.

Any suggestions on what I can do to convince him to open the ports for Apache, mysql, ect. He is has been very stubborn at every opportunity when I bring up the firewall >.<

Moved from IIS

Q1 - who's head is in the noose if security is compromised?

Q2 - who's head is in the noose if you manage to hack some bypass that wasn't approved by the security guy, and then security is compromised?

Q3 - who is driving (or approved) the requirement that states external users should be allowed to download files? Are they aware of the security implications? Have the approver and security people even talked to one another?