cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
796
Views
0
Helpful
4
Replies

CUCM in Firewall Segment

faamin011
Beginner
Beginner

In respect of Audit cocnern, a customer demands to place CUCM 8.x behind Firewall currently it is positioned without any involment of firewall. Please answer below mentioned quries , make note there are around 2000 active users..

would be any issue if we place Cisco Unified Call Manager (PUB) behind Firewall...

Won't be any performance impact on either side Cisco Firewall or CUCM..as all traffic will pass via Firewall..

Any practicle example you noticed or observed any where...

Is this the right approach in security point of view or we don't need to involve hardware firewall in Voip...

What is recomended by Cisco in this case....

As per my understaing, in voice communication CUCM only be involve to establish the Voip Call once call established the communication will be directly between cisco extensions.. similarly firewall will also be involve while establishing call otherwise it will remain ideal...

4 REPLIES 4

Aman Soi
Advisor
Advisor

Hi Fahad,

You can ask customer to use Audit Log feature available in CUCM.

If customer needs to place behind firewall, then, TCP and UDP ports need to be opened.

regds,

aman

obvious for tcp and udp,, but my question still stand that will be any performance issue or is it practicle approach..!

Hi Fahad,

We did installation where we placed single server  behind the Firewall ,did NATTING  and took  much more  time to stabilize.

regds,

aman

Hi Fahad,

     It should work just fine as long as the following porst are allowed :

http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/port/8_5_1/portlist851.html

And yes, once the call is connected the RTP flows from endpoint to endpoint until the time you use a CUCM based media resource in which case, the RTP will flow from/through the server.

Regards,

Jagpreet

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: