Firewall between IP phones and Call Manager

[jslagle]

I am going to be placing a Firewall between My Call Manager and Some Ip Phones, are these all the ports that I need to open? I am running 3.2.2

Thanks

TCP/2000, TCP/2427-2428 for MGCP signaling, UDP/16384-32767 for audio.

the corporate directory or XML servicesTCP/80, SoftPhone TCP/2748 and TCP/8404.

TCP/2001 and TCP/2002 for Skinny based gateway signaling.

[gary.shaw]

These are some recommendations from the new design guide@: -

Skinny Client TCP 2000

Skinny Gateway (Analog) TCP 2001

Skinny Gateway (Digital) TCP 2002

H.323 RAS TCP 1719

H.323 (H.225) TCP 1720

H.323 (H.245) TCP 11xxx

MGCP UDP 2427 and TCP 2428

CTI (TAPI/JTAPI) TCP 2748

HTTPS TCP 443

LDAP TCP/UDP 386

SoftPhone Directory TCP 8404

DNS (optional, configuration dependent) UDP 53

[jslagle]

Will a Checkpoint Firewall-1 ver 4.1 work as a Firewall for the VOIP??? In our design we will not be using nat but we will have some phone outside the Firewall as well as some inside with the CM's on the inside.

Thanks