cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

927
Views
0
Helpful
3
Replies
Highlighted
Beginner

CUBE behind NAT(ASA)

Hi all, 

A have a CUBE directly connected to a SIP ITSP, there is no firewall between the ITSP and the CUBE. 

Is it possible to place a Cisco ASA between the CUBE and ITSP? Any ideas on the config? 

Thanks 

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
VIP Advisor

Geovani,

Geovani,

as far as I am aware, Cisco has no best practice that stipulates that a CUBE cannot be behind a ASA/Firewall. or that it has to be behind a firewall.  

If you do sit it behind a FW/ASA it is easier to implement security towards your CUBE. The implication is that it might break SIP signalling if you are not careful because of NAT and deep packet inspection.

so really, there is no wrong or right here.

Please remember to rate useful posts, by clicking on the stars below.

View solution in original post

3 REPLIES 3
Highlighted
Engager

You could an ASA in front of

You could an ASA in front of the CUBE, but why...?

GTG

Please rate all helpful posts.
Highlighted
Beginner

Hi Gordon, 

Hi Gordon, 

I have a client who is changing their network design so they can have an ASA between CUBE and provider.  What is Cisco's best practice? 

Highlighted
VIP Advisor

Geovani,

Geovani,

as far as I am aware, Cisco has no best practice that stipulates that a CUBE cannot be behind a ASA/Firewall. or that it has to be behind a firewall.  

If you do sit it behind a FW/ASA it is easier to implement security towards your CUBE. The implication is that it might break SIP signalling if you are not careful because of NAT and deep packet inspection.

so really, there is no wrong or right here.

Please remember to rate useful posts, by clicking on the stars below.

View solution in original post

CreatePlease to create content
Content for Community-Ad
Future of Work Virtual Summit Day 5

Cisco COVID-19 Survey