Tim -

A couple things:
1) We use ISA 2006 internally (not for Sipx as of 6/17/2010)
2) We had it working 'reliably' for ITSP connections - however - we could NOT 
get the following to work reliably:
        * Inbound SIP URI dialing
        * Remote worker

We just switched to pfsense based firewall for our sipx connection (we assigned 
another external IP address to the pfSense - it went very smoothly) - I 
actually IM'd Tony about this literally seconds after he replied to your post.  
Thanks for the help by the way.

Bottom line - go pfsense if at all possible.  I've been running sipx behind ISA 
2006 for a while now - wish I'd put in the effort to get pfsense running from 
day 1 - would have saved me a lot of time - and it actually works (haven't 
tested remote worker yet - but hope to this week).

Tony/Jim were both a great resource.  Thanks again to you both.

Nathaniel

-----Original Message-----
From: [email protected] 
[mailto:[email protected]] On Behalf Of Tony Graziano
Sent: Thursday, June 17, 2010 11:12 PM
To: Tim Byng
Cc: sipX Users Mailing List
Subject: Re: [sipx-users] ISA 2004 Firewall Configuration

Nathan ended up switching to a different firewall though I think...

On Thu, Jun 17, 2010 at 1:11 PM, Tim Byng <[email protected]> wrote:
> I would like to use our second internet line as a backup if our
> dedicated voip internet line goes down. However, I'm having a problem
> configuring ISA
> 2004 Firewall for this.
> First of all, I changed the gateway on the sipXecs server to the
> secondary line. I also changed the Public IP Address setting in
> sipXecs. I set up new protocols in ISA 2004:
> - 5060, udp, receive send and 5080, udp, receive send
> - 30000 to 31000, udp, receive send
> I then set up a couple of publishing rules using these protocols and
> an access rule allowing all outbound traffic from the sipXecs server.
> However, my sipXecs server could not successfully register with my ITSP.
> I found a post from Nathaniel Watkins, and the rules he used to get
> this working were very similar to mine. Here's his configuration:
> 1)      Access Rule allowing all traffic from Sipx to the outside
> world
> 2)      Publishing Rule allowing incoming traffic on port 5080 to sipx.
> 3)      Publishing Rule allowing incoming traffic on ports 30000-31000
> to sipx.
> This is the first time a set up custom protocols, so maybe I didn't
> set them up correctly? Any suggestions on how to resolve this issue?
> Thanks,
> Tim
>
> _______________________________________________
> sipx-users mailing list [email protected] List Archive:
> http://list.sipfoundry.org/archive/sipx-users
> Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users
> sipXecs IP PBX -- http://www.sipfoundry.org/
>



--
======================
Tony Graziano, Manager
Telephone: 434.984.8430
sip: [email protected]
Fax: 434.984.8431

Email: [email protected]

LAN/Telephony/Security and Control Systems Helpdesk:
Telephone: 434.984.8426
sip: [email protected]
Fax: 434.984.8427

Helpdesk Contract Customers:
http://www.myitdepartment.net/gethelp/

Why do mathematicians always confuse Halloween and Christmas?
Because 31 Oct = 25 Dec.
_______________________________________________
sipx-users mailing list [email protected] List Archive: 
http://list.sipfoundry.org/archive/sipx-users
Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users
sipXecs IP PBX -- http://www.sipfoundry.org/

This message and any files transmitted with it are intended only for the 
individual(s) or entity named. If you are not the intended individual(s) or 
entity named you are hereby notified that any disclosure, copying, distribution 
or reliance upon its contents is strictly prohibited. If you have received this 
in error, please notify the sender, delete the original, and destroy all 
copies. Email transmissions cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late or 
incomplete, or contain viruses. Garrett County Government therefore does not 
accept any liability for any errors or omissions in the contents of this 
message, which arise as a result of email transmission.


 Garrett County Government,
203 South Fourth Street, Courthouse, Oakland, Maryland 21550 
www.garrettcounty.org
_______________________________________________
sipx-users mailing list [email protected]
List Archive: http://list.sipfoundry.org/archive/sipx-users
Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users
sipXecs IP PBX -- http://www.sipfoundry.org/

Reply via email to