We use Juniper/Netscreen 5GT's with the latest 5.3 firmware.
It is fully sip aware and in a NAT environment it modifies the addresses in the SIP frames according the NAT table.
The netscreen also checks the sip frame for the udp ports to be opened for the audiochannels and openn them for the session only.
We have clients and servers inside and outside, and everything talks SIP and works like a charm.
Regards.
Andre Vink
Vink Consultancy
----- Oorspronkelijk Bericht -----
Onderwerp: RE: [Asterisk-Users] OT: SIP aware firewalls?
Afzender: Chris Bagnall <[EMAIL PROTECTED]>
Aan: "\'Asterisk Users Mailing List - Non-Commercial Discussion\'" <[email protected]>
Datum: 07-01-2006 1:25
> I know that I can stay with m0n0. The question still stands;
> are there circumstances when something more is required?
> Would something be gained by such a migration.
I would think the only real circumstances where true SIP-aware firewalls
would be required would be in an environment where one had many SIP devices
behind a NAT (and by many I mean more than it\'s reasonably practical to
assign different port numbers to).
I\'m no expert on firewalls, so hopefully someone\'ll correct me if I\'m
mistaken.
Regards,
Chris
--
C.M. Bagnall, Director, Minotaur I.T. Limited
This email is made from 100% recycled electrons
_______________________________________________
--Bandwidth and Colocation provided by Easynews.com --
Asterisk-Users mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users
_______________________________________________ --Bandwidth and Colocation provided by Easynews.com --
Asterisk-Users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
