Which action is required for a firewall configuration on a Mobile and Remote Access through Cisco Expressway deployment?

Question

Options

• AThe traversal zone on Expressway-C points to Expressway-E through the peer address field on
• BThe internal firewall must allow these inbound and outbound connections between Expressway-C
• CThe external firewall must allow these inbound connections to Expressway: SIP: TCP 5061;
• DDo not use a shared address for Expressway-E and Expressway-C, as the firewall cannot

• A
  4% (1)
• B
  4% (1)
• C
  93% (25)

Explanation

In a Mobile and Remote Access (MRA) deployment, remote Jabber clients connect to Cisco Expressway-E from the internet. The external firewall (between the internet and the DMZ where Expressway-E resides) must allow specific inbound connections to Expressway-E. This includes SIP over TLS on TCP port 5061, HTTPS on TCP port 443 (for provisioning and XMPP), and media ports (UDP). Answer C correctly describes this external firewall requirement. Expressway-C (the internal node) communicates with Expressway-E through a traversal zone - that is an internal firewall consideration, not the external one described in C.

No community discussion yet for this question.