Hello,
Our current security on our 5300 Gateway is by Access Lists of known GW's for both UDP and TCP. We want to allow GW's and terminals with dynamic IP address and registered to our GK the ability to terminate calls on the GW without allowing any other originating GW's.
A friend reasoned that as all signaling is done in TCP (regardless of Fast or Slow Start). Permitting all UDP ports and permitting only TCP for known GW's and our GK, would accomplish our security goals.
Can anyone confirm or advise?
Thank!!
Albert
