![]() ![]() Cisco Expressway can act as a proxy server for Session Initiation Protocol (SIP) and/or H.323 voice and video traffic. If the DMZ doesn't permit direct connections between internal and external networks, dedicated servers are required to handle traffic that traverses the DMZ. ![]() When Cisco Expressway-E is in a DMZ, a perimeter (external) firewall can be used to block unwanted access to Expressway from external networks via Hypertext Transfer Protocol Secure (HTTPS) or Secure Shell (SSH) requests. In the most common scenario, Cisco Expressway-E is managed by the Private Network.When Cisco Expressway-E is placed in a DMZ, these are the additional benefits: Background Informationīy design, Cisco Expressway-E can be placed either in a Demilitarized Zone (DMZ) or with an Internet-facing interface, while it is able to communicate with Cisco Expressway-C in a private network. However, the same configuration applies for the Video Communication Server (VCS) Expressway and VCS Control devices. Note: Through the entire document, the expressway devices are referred to as Expressway-E and Expressway-C. If your network is live, ensure that you understand the potential impact of any command. All of the devices used in this document started with a cleared (default) configuration. The information in this document was created from the devices in a specific lab environment. The information in this document is based on these software and hardware versions:Ĭisco ASA 55-X Series appliances that run software Version 8.0 and later. Prerequisites RequirementsĬisco recommends that you have knowledge of these topics:Ĭisco ASA basic configuration and NAT configurationĬisco Expressway-E and Expressway-C basic configuration Tip: This deployment is the recommended option for Expressway-E implementation, rather than the Single-NIC implementation with NAT reflection. This document describes how to implement the Network Address Translation (NAT) configuration required in the Cisco Adaptive Security Appliance (ASA) for the Expressway-E Dual Network Interfaces implementation. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |