Establish a SIP trunk through a firewall

[Suchi]

Hi,

I need to establish a SIP trunk through a firewall (Check Point)

UCM--SIP---CUBE---Firewall---ITSP

1. What are the ports need to open in the firewall

2. What are the  possible issue of the SIP trunk through a firewall?

Please advise

Suchi

[Georgios Fotiadis · Accepted solution]

You should enabled SIP inspection on the firewall; that will take care port openings (for both signalling and media) and SDP headers.

In addition to that, for incoming call establishment, you should allow SIP signalling ports (TCP/UDP 5060) and define the corresponding static NAT entries to point to your CUBE (if CUBE is behind NAT and not in the DMZ).