<html><head><style type='text/css'>p { margin: 0; }</style></head><body><div style='font-family: verdana,helvetica,sans-serif; font-size: 10pt; color: #000000'><div style="color: rgb(0, 0, 0); font-family: verdana, helvetica, sans-serif; font-size: 10pt;"><br></div><div style="color: rgb(0, 0, 0); font-family: verdana, helvetica, sans-serif; font-size: 10pt;"><span style="font-size: 13.3333330154419px;">I'm about to set up firewall security so Jabber clients (and IP Communicator) can access the telephony servers (CUCM, Connection, IM&P, UCCx, etc) and I was</span> hoping to get some ideas as to what others have done and if I'm missing anything obvious here. <span style="font-size: 10pt;">I'm using the CUCM/IM&P port list as well as the Jabber deployment guide to get the Jabber port list. For the firewall, we </span><span style="font-size: 10pt;">are using an ASA appliance pair, v 9.1(3).</span></div><div style="color: rgb(0, 0, 0); font-family: verdana, helvetica, sans-serif; font-size: 10pt;"><span style="font-size: 10pt;"><br></span></div><div style="color: rgb(0, 0, 0); font-family: verdana, helvetica, sans-serif; font-size: 10pt;"><span style="font-size: 10pt;">Typically we build the ACL statements with the source address object group coupled with destination address object group and the destination port object group. I don't think there is a need to build the ACL with a source port object group at this time.</span></div><div style="color: rgb(0, 0, 0); font-family: verdana, helvetica, sans-serif; font-size: 10pt;"><span style="font-size: 10pt;"><br></span></div><div><font face="verdana, helvetica, sans-serif"><span style="font-size: 10pt;">I've also been told that we might have some multicast limitations with the firewall, </span><span style="font-size: 13.3333330154419px;">basically</span><span style="font-size: 10pt;">, multicast traffic can't pass through our firewall.</span></font></div><div><font face="verdana, helvetica, sans-serif"><span style="font-size: 10pt;"><br></span></font></div><div><font face="verdana, helvetica, sans-serif"><span style="font-size: 13.3333330154419px;">Any comments would be helpful. But I'm wondering, specifically:</span></font></div><div><ul><li><font face="verdana, helvetica, sans-serif"><span style="font-size: 13.3333330154419px;">Are people deploying IP Communicator still? For all the benefits of Jabber, I don't see it as a replacement for a softphone with access to all the buttons and apps that are available, like services, directories, conference/join, etc. Does UCCx work with Jabber for example?</span></font></li><li><font face="verdana, helvetica, sans-serif"><span style="font-size: 13.3333330154419px;">What have others done for firewall ACL building? Is there a firewall feature set I'm not aware of that will simplify my life?</span></font></li><li><font face="verdana, helvetica, sans-serif"><span style="font-size: 13.3333330154419px;">Are there any multicast requirements when deploying Jabber and IPCommunicator? Aside from MoH?</span></font></li></ul><div><font face="verdana, helvetica, sans-serif"><span style="font-size: 13.3333330154419px;">Thanks in advance for any help!</span></font></div></div><div><font face="verdana, helvetica, sans-serif"><span style="font-size: 13.3333330154419px;"><br></span></font></div><div><font face="verdana, helvetica, sans-serif"><span style="font-size: 13.3333330154419px;">Lelio</span></font></div><div><font face="verdana, helvetica, sans-serif"><span style="font-size: 13.3333330154419px;"><br></span></font></div><br><br><div style="color: rgb(0, 0, 0); font-family: verdana, helvetica, sans-serif; font-size: 10pt;"><span name="x"></span>---<br>Lelio Fulgenzi, B.A.<br>Senior Analyst, Network Infrastructure<br>Computing and Communications Services (CCS)<br>University of Guelph<br><br>519‐824‐4120 Ext 56354<br>lelio@uoguelph.ca<br>www.uoguelph.ca/ccs<br>Room 037, Animal Science and Nutrition Building<br>Guelph, Ontario, N1G 2W1<span name="x"></span><br></div><br></div></body></html>