Hi Adrian and Coral Tech thanks for the advice. It looks using 2 IP for the signal and Media on IPXOffice system is the main problem for the Firewall to figure out and seems Sentinel is the ultimate solution. This is different with such as Asterix which use only 1 IP.

Before giving up on this, I will do one more shot to put the UGW outside using 2 public IP. How do I set the UGW with Public IP? The current setting for the signaling and media IP addr, netmask and gateway are set for internal IP (192.168.10.200 and 192.168.10.201) and for the Global IP, I dont see setting for netmask and gateway.
If I change the current Internal IP to Public, then how to set the internal IP netmask and gateway. Do I need to use Global IP for the internal?
Is the UGW lan port located the one in the front?

Is the STUN server or SIP Proxy can be use to replace Sentinel? Sentinel still to expensive expensive.

Thanks
Dendiko