Firewall configuration for calling from H.323 endpoints to StarLeaf

This article describes firewall configuration for calling to the StarLeaf platform from H.323 endpoints that are not registered with StarLeaf. If your endpoint is registered to StarLeaf, refer to Firewall configuration for H.323 endpoints registered to StarLeaf.

Firewall traversal

To call a StarLeaf endpoint from your H.323 endpoint, the H. 323 endpoint needs to be able to call outside of your network. There are several ways this can happen:

• The endpoint is registered to a network device such as a Cisco VCS
• The endpoint is registered to a H.323-aware firewall that has an ALG/application-layer gateway for H.323
• The endpoint is on a public IP address

Calling from an unregistered H.323 endpoint on a private IP address is not supported.

The ports you need to open on your firewall are shown in this table: