Using a UC320 as a SIP gateway

[clifford.gormley]

This is a design question.

From what I have read, the UC320 does not have a built-in firewall.

If this is the case, it appears that I need a separate appliance to be my Internet firewall.

Is it standard practice to pass SIP through a separate firewall appliance, where this SIP trunk will terminate on my UC320?

My UC320 will be behind the firewall appliance:   Internet -> Internet Firewall -> UC320--Lan--pcs and phones.

Thanks

Cliff

[Karsten Iwen]

The feature-guide talks about a basic firewall in the UC320 with basic port forwarding:

http://www.cisco.com/en/US/docs/voice_ip_comm/unified_communications/csbuc300/html/uc320w_ag_78-19371en.htm#WS_PortForwarding

But It's a voip-device, probably without real security in mind. So I would never place it directly onto the internet without a dedicated firewall. My UC320 is sitting in the DMZ, but not with a SIP-trunk to the internet because I'm using the Mediatrix gateway for BRI.

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

[clifford.gormley]

Thank you Karsten

This is great info.!