Firewall Suggestion for Voice

[jonathan.salter]

So my manager sent an email out looking to move to a voice dedicated firewall.

Any suggestions on where to begin to look for a solution?

Thanks.

[balaji.bandi]

Cisco have many models. but you need look what features you looking for what is the bandwidth requirement for this FW to handle.(like transit traffic via FW).

5500X is the start model (https://www.cisco.com/c/en/us/products/security/asa-firepower-services/index.html)

depends on your cost model choose the best model looking in next 5 years of investment protection.

[Chris Deren]

Well, careful planning is going to be in order to get this right.  Every Cisco app needs to be looked at independently and Cisco does a good job documenting all UDP/TCP ports in use for their app, though every now and then you'll find something is missing.  I would suggest identifying all of the apps you have that will be behind firewall and laying out traffic flows of what they need to communicate with, then going through the port guides outline what is going to be required.  I have many customers who went that path with various results, but it can be done.