Can I ambush when units attack THROUGH a zone...as in to protect my legend?

Sure. Face-down developments in the defending zone can ambush, and when a legend is attacked through a zone, that zone is the defending one.