atcomsystems.ca/forum Forums TDM Business Telephone Systems Toshiba Telephones & Systems VoIP firewalling?

hello again,

i currently have our CIX's VoIP card 100% open to the net. is this safe? does anyone have any recommendations for securing ports?

the firewall is built on to our T1 router (netopia), but is decently flexible. we're using IPT2010-SDs for the offsite phones.

thanks!

I have been told it's safe and it's only one of the few options you have

I've haven't had any luck getting the card to work from behind a firewall.

I'm able to open the necessary ports and get the phones to sync but the voice does not tranfer through. The voice not getting through is the main sympton of having the card behind a firewall.

Using the phones through VPN is usually the best method but isn't always possible since most companies use a software based VPN connection.

If you find a way to get it to work through a firewall, post back here.

Well, my thought on a firewall is, that if you would have to open up all the ports it needs, and everything else, the LIPU or BIPU card wouldn't know what to do anyway. You aren't running a Web or FTP server. Only thing someone could do is attach an IP phone to your switch, and they could do that with or without a firewall anyway. Main security point is firewalls could block a ping request.

Also, you can not use NAT on the BIPU or LIPU side.
There must be a public IP address assigned to the cards.

Netgear makes routers that aren't too expensive that can create a VPN tunnel. I connect 2 together a while back for an office/home VPN connection. Probably other solutions if you look arounds.

I've got the BIPU-M to work with a firewall, by opening a few ports, but the BIPU-Q doesn't like firewalls.

LIPU, theoretically should work with a firewall, but no NAT please.

thanks for the discussion. i was also told it was safe, so unless i hear otherwise, i guess i'm just going to leave that one IP hanging out like it is.