SIP Enabled Firewall 1

[Telecomp9434]

Hello Does anyone know of easy to use SIP enabled firewall other then MBG? Or do you recommend just going MBG. I am installing Bandwidth.com SIP trunks over a Verizon FIber connection witH MCD 5.0.
I always asssumed that the Mitel could handle SIP trunks directly, i guess iw as wrong.

thanks-

http://www.Telecomp-inc.com

"Voice and Data Solutions

 

[slapin]

It can handle trunks directly. Used it with L3 and SpeakEasy services.
Properly configured firewall and SIP trunks in ICP are required.

I also had success using siproxyd

http://siproxd.sourceforge.net/

It has a number of nice features like authentication with external provider, so you don't need to deal with it on ICP and packets QoS re-marking if they come from the Internet unmarked or marked incorrectly.

 

[Telecomp9434]

Thanks Slapin...so it looks like your telling me if I have everything programmed correctly the 3300 will take a SIP trunk directly? I call Mitel support and they told me I will need a SIP aware firewall....that is why I am asking..

http://www.Telecomp-inc.com

"Voice and Data Solutions

 

[slapin]

The reason they say so is that it is not recommended to expose ICP to the wild Internet.
Due to SIP protocol complexity and the fact that routing information is carried in the packet payload, just a regular firewall which is looking into packet headers only will be hard to configure. Firewalls manufacturers responded to the market demand and started making devices which can detect and understand SIP messages, so proper ports can be opened when needed based on the message content in the packet payload.
Another point is that most likely you are running a private network behind NAT, so the firewall could be acting as NAT as well and possible modify the payload, so remote parties don't need to guess anything, which can lead to unpredictable side effects.

The bottom line. You don't have to have it, but it will make your life much easier and your users happy.

 

[Billz66]

We have some carriers in Aus that require a Sip proxy ( MBG) to anchor the sip to a single local IP address ( when managed wans are involved).

Mitel will normally only support what they have tested with the carrier .

If I never did anything I'd never done before , I'd never do anything.....

 

[LoopyLou]

No you were right in the first place. As others ave pointed out, the 3300 can take SIP trunk directly ( MCA, connections to another VoIP PBX, connections to MS Lync or Exchange ). It all comes down to what the carrier uses.

I'd tell you a UDP joke but I'm afraid you won't get it. TCP jokes are the best because you always get them.