You also need ESX names to be resolvable through VPN because when you open VM console it connects directly to ESX.
Oh, sorry, I forgot. You don't need 80. The only needed ports are 443 to vCenter, 902 and 903 to ESX.
Network interaction diagram is here: http://farm4.static.flickr.com/3096/3103670464_674d0e5a01_b.jpg
All this applies to machine you want run vSphere Client on. So if you do as David recommended - setup machine and use vSphere client in terminal session all this applies to machine with vSphere Client.
---
MCSA, MCTS, VCP, VMware vExpert '2009
http://blog.vadmin.ru