Janie,
If your ArcGIS server is not public facing I am not sure how you plan on your app working. The client downloads the flex application to the browser, then the browser makes calls to the ArcGIS server to get the data, if this server is not public facing then the browser will not have access to the data.
Regards
Anthony