CUBE behind NAT(ASA)

[Geo Gon]

Hi all, 

A have a CUBE directly connected to a SIP ITSP, there is no firewall between the ITSP and the CUBE. 

Is it possible to place a Cisco ASA between the CUBE and ITSP? Any ideas on the config? 

Thanks 

[Gordon Ross]

You could an ASA in front of the CUBE, but why...?

GTG

[Geo Gon]

Hi Gordon, 

I have a client who is changing their network design so they can have an ASA between CUBE and provider.  What is Cisco's best practice? 

[Dennis Mink · Accepted solution]

Geovani,

as far as I am aware, Cisco has no best practice that stipulates that a CUBE cannot be behind a ASA/Firewall. or that it has to be behind a firewall.  

If you do sit it behind a FW/ASA it is easier to implement security towards your CUBE. The implication is that it might break SIP signalling if you are not careful because of NAT and deep packet inspection.

so really, there is no wrong or right here.