Yes, the way the IPRC 8.1 firmware works, it does not allow packets to pass through a firewall, software or hardware based. So, if you have phones on site and off connected to the same IPRC, it must sit outside the firewall.