What is the mechanism the NAV server uses to publish web services ?

hi everyone,
correct me if i am wrong,but i think that the machine that has the nav server can populate the web services without a web server. (in our case the web components for the web/universal clients are installed in another server)
So,?
1.Is there any document / whitepaper to explain the mechanism? (customer's it security asked for it)
2.at last is there any document about port forwarding etc of how to expose out in the internet these web services?
Kind regards and any help is too much appreciated