[Asterisk-Users] OT: SIP aware firewalls?

Asterisk
Mon, 09 Jan 2006 01:35:06 -0000

We use  Juniper/Netscreen 5GT's with the latest 5.3 firmware.
It is fully sip aware and in a NAT environment it modifies the
addresses in the SIP frames according the NAT table.
The netscreen also checks the sip frame for the udp ports to be
opened for the audiochannels and openn them for the session only.

	We have clients and servers inside and outside, and everything talks
SIP and works like a charm.

	Regards.

	Andre Vink
Vink Consultancy
 ----- Oorspronkelijk Bericht -----
Onderwerp: RE: [Asterisk-Users] OT: SIP aware firewalls?
Afzender:  Chris Bagnall
Aan: "'Asterisk Users Mailing List - Non-Commercial
Discussion'"
Datum: 07-01-2006 1:25
> I know that I can stay with m0n0. The question still stands;
> are there circumstances when something more is required?
> Would something be gained by such a migration.

I would think the only real circumstances where true SIP-aware
firewalls
would be required would be in an environment where one had many SIP
devices
behind a NAT (and by many I mean more than it's reasonably practical
to
assign different port numbers to).

I'm no expert on firewalls, so hopefully someone'll correct me if
I'm
mistaken.

Regards,

Chris
--
C.M. Bagnall, Director, Minotaur I.T. Limited
This email is made from 100% recycled electrons
_______________________________________________
--Bandwidth and Colocation provided by Easynews.com --

Asterisk-Users mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users


-------------- next part --------------
An HTML attachment was scrubbed...