Thanks man this was helpful. I would prefer the later method since I am not as savvy with security protocol. I will be trying to set up SSL connections from my clients to the broker though for security.
Two questions here: Is this the same as the external website acting as an MQTT client to the broker? Secondly what about the fact that the sensors are on a cellular network, does this affect firewall/ports since the broker is on my local network?