You need to speak to your companies network administrators and ask them what an acceptable solution is based on their security requirements.
- Use a VPN, very simple if your infrastructure already supports using VPNs
- Configure your network to allow external requests to be routed to your TFS server
Before you speak to the network Admins, read this link as it explains a number of connection scenarios.