We are looking to redesign our voice environment and have PaloAlto FW in place now. Our current cubes hang directly off the public facing subnets and then have an internal interface. Would the new recommendation be put an internal interface and then put a dmz interface with static NAT on FW? I assume I'd have to update SIP headers and such to reflect the public IP of SIP interface for trunk? Thanks
