I do not see any other solutions that NAT/Masquerading.
We did have that kind of problems in a previous infrastructure and that was the solution we sat up to address the issue.
Also, in a hybrid cloud and in private cloud with multiple organization, this is the solution your almost forced to implement. This is the one of the main purpose of Edge Appliance.
Regards.
Ludo