we protect our Call managers 4.2.1sr1b with a PIX 525 IOS 7.2(2)10 from the data network in our enterprise. We have Attendant Console users in our network and we want to open only the required ports in our FW to permit the AC users to connect to the Call managers. Unfortunately, from the Cisco documentation, we can see that the AC application is using ephemeral TCP destination ports to connect (RMI server bind ports) with the Call Manager.
Is there a way to specify a range of TCP ports that the AC application will use?
Otherwise, is there an "inspect <protocol>" inside the PIX that will open TCP ports dynamically?