nerdexam
Cisco

300-820 · Question #72

Refer to the exhibit. Which inbound connection should an administrator configure on the outside firewall?

The correct answer is D. XMPP: TCP 5222. In a Mobile and Remote Access (MRA) deployment, Jabber clients outside the corporate network connect to Expressway-E using XMPP over TCP port 5222 for instant messaging, presence, and signaling. This port must be opened inbound on the outside firewall to allow remote Jabber…

Mobile and Remote Access

Question

Refer to the exhibit. Which inbound connection should an administrator configure on the outside firewall?

Exhibit

300-820 question #72 exhibit

Options

  • AMedia: UDP 36000 to 36011
  • BHTTPS (tunneled over SSH between C and E): TCP 2222
  • CSIP: TCP 5061
  • DXMPP: TCP 5222

How the community answered

(30 responses)
  • A
    3% (1)
  • B
    7% (2)
  • C
    3% (1)
  • D
    87% (26)

Explanation

In a Mobile and Remote Access (MRA) deployment, Jabber clients outside the corporate network connect to Expressway-E using XMPP over TCP port 5222 for instant messaging, presence, and signaling. This port must be opened inbound on the outside firewall to allow remote Jabber clients to establish their XMPP session. The SSH tunnel (TCP 2222) is internal between Expressway-C and Expressway-E, SIP TLS (TCP 5061) is typically allowed but XMPP 5222 is specifically required for Jabber MRA client connectivity from outside, and UDP 36000–36011 is a media range for internal traversal, not an inbound outside firewall rule.

Topics

#Expressway Firewall Ports#XMPP#Mobile and Remote Access#DMZ Configuration

Community Discussion

No community discussion yet for this question.

Full 300-820 Practice