[asterisk-users] Access PBX from internet - best practice

[richard.seguin at marisec.ca]

Hello,

I have a question about best practice (or recommended practice) for allowing SIP registrations from the Internet.   

This is what I was thinking of implementing:
1. Use OpenSips for the SBC,  enable SRTP and TLS
2. Allow limited access to the actual Asterisk PBX (behind firewall) via OpenSips

Is there anything that I am missing that probably should be implemented?

Thanks,

Richard