Zerto replication via public internet?

It’s possible in theory, but not recommended in practice. Communication across networks can be encrypted using network encryption software such as VPN and IPsec. Zerto does not natively encrypt data across the WAN. Zerto recommends segregating management and replication traffic from the rest of the network, in order to mitigate any unknown vulnerabilities.