UC TLS Proxy function in a one-armed setup

[ROBERTO GIANA]

Hi

Is the UC TLS Proxy functionality for CUMA supported in a one-armed setup? So the ASA is acting as a proxy with just one interface connected to the network. TLS clients are connecting over that interface, meanwhile the CUMA / call manager are also behind that interface. The ASA would be placed into a DMZ of an additional firewall.

Greetings

Roberto

[Nicolas Fournier]

Hi Roberto,

In the CUMA documentation, you'll find the following phrase which implies that what you would like to do is supported:

Whether deploying the ASA as both a TLS Proxy and firewall or deploying the ASA as simply a TLS Proxy in a DMZ and relying on some external firewall...

http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/srnd/7x/mobilapp.html#wp1082911

Just make sure that you have the following configured on your ASA to allow the firewall to hairpin the traffic:

same-security-traffic permit intra-interface

Regards,

Nicolas