Thanks for the response Alberto. I know the VPN needs to terminate at the UC, but I have to pass it
through the SA. But the UC would seem to require a public IP address on the WAN in order for the wizard
to configure the phone. As you run the wizard it lists the remote IP address that the phone needs to connect to, which is the WAN address. If this is a non-routable address, how is this going to work? The wizard does not allow you to change the IP address.