The answer is yes... But you can't do it like a 250 because the 3300 doesn't support NAT at all.
The easiest way is to reconfigure the MBG into Server-Gateway mode and put a static, public IP on the second Ethernet interface... From there it's incredibly simple. We do 90% of all MBG's like this, even VMs.
Otherwise it needs to go in a (real) DMZ and a ton of ports need to be redirected to it on a 1:1 NAT basis... Download Teleworker Network Analyzer from your MBG (in the diagnostics tab) and run it to see what you need to open.