<html><head><meta http-equiv=Content-Type content="text/html;charset=UTF-8"><meta content="Group-Office 2.15" name="GENERATOR"></head><body><p>We use Juniper/Netscreen 5GT's with the latest 5.3 firmware.<br />It is fully sip aware and in a NAT environment it modifies the addresses in the SIP frames according the NAT table.<br />The netscreen also checks the sip frame for the udp ports to be opened for the audiochannels and openn them for the session only.</p>
<p>We have clients and servers inside and outside, and everything talks SIP and works like a charm.</p>
<p>Regards.</p>
<p>Andre Vink<br />Vink Consultancy<br /></p>
<blockquote style="BORDER-TOP-WIDTH: 0px; PADDING-RIGHT: 0px; PADDING-LEFT: 5px; BORDER-BOTTOM-WIDTH: 0px; PADDING-BOTTOM: 0px; MARGIN: 0px 0px 0px 5px; BORDER-LEFT: #22437f 2px solid; PADDING-TOP: 0px; BORDER-RIGHT-WIDTH: 0px"><font face="verdana" size="2">----- Oorspronkelijk Bericht -----<br /><strong>Onderwerp: </strong>RE: [Asterisk-Users] OT: SIP aware firewalls?<br /><strong>Afzender: </strong>Chris Bagnall <asterisk@minotaur.cc><br /><strong>Aan: </strong>"\'Asterisk Users Mailing List - Non-Commercial Discussion\'" <asterisk-users@lists.digium.com><br /><strong>Datum: </strong>07-01-2006 1:25<br /></font><br /><br />> I know that I can stay with m0n0. The question still stands; <br />> are there circumstances when something more is required? <br />> Would something be gained by such a migration.<br /><br />I would think the only real circumstances where true SIP-aware firewalls<br />would be required would be in an
environment where one had many SIP devices<br />behind a NAT (and by many I mean more than it\'s reasonably practical to<br />assign different port numbers to).<br /><br />I\'m no expert on firewalls, so hopefully someone\'ll correct me if I\'m<br />mistaken.<br /><br />Regards,<br /><br />Chris<br />-- <br />C.M. Bagnall, Director, Minotaur I.T. Limited<br />This email is made from 100% recycled electrons<br /><br /><br />_______________________________________________<br />--Bandwidth and Colocation provided by Easynews.com --<br /><br />Asterisk-Users mailing list<br />To UNSUBSCRIBE or update options visit:<br />http://lists.digium.com/mailman/listinfo/asterisk-users<br /><br /></blockquote></body></html>