We already use Hamachi to link our isolated servers together, but it is possible to restrict access to certain applications so that they can only be seen on the server or via Hamachi's VPN.
From our logs we can see "far eastern" probing of our SQL Server installations, and ideally we would like to restrict access to SQL Server boxes. We have a unsophisticated network topology of leased servers.