<div dir="ltr">Lelio,<div><br></div><div>You don't need RMS licenses for Webex calls. You need to use the exact settings mentioned in the Webex CMR Guide though- <a href="https://www.cisco.com/c/dam/en/us/td/docs/collaboration/webex_centers/esp/WebEx_Meeting_Center_Video_Conferencing_Enterprise_Deployment_Guide_WBS31_WBS32.pdf">https://www.cisco.com/c/dam/en/us/td/docs/collaboration/webex_centers/esp/WebEx_Meeting_Center_Video_Conferencing_Enterprise_Deployment_Guide_WBS31_WBS32.pdf</a></div><div><br></div><div>Also Webex will typically try TLS inbound so I would just go with the _sips SRV record and just open inbound 5061 along with the audio ports. You can disable TCP/UDP 5060 from the Expressway as well.</div><div><br></div><div>You can also setup mutual TLS with Webex for even more security. That way Expressway is only trusting Webex certificates for inbound calls. Most of that documentation is in the Hybrid Services Call Service Connect documentation.</div></div><br><div class="gmail_quote"><div dir="ltr">On Wed, Aug 1, 2018 at 9:09 AM Lelio Fulgenzi <<a href="mailto:lelio@uoguelph.ca">lelio@uoguelph.ca</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="auto">
<div><span></span></div>
<div>
<div><br>
</div>
<div>We’re finally taking a turn (not to be confused with TURN - hahaha) at getting CUCM talking to WebEx. Im guessing this is simply a B2B setup with the need for licenses. </div>
<div><br>
</div>
<div>The question I have is whether or not I should be activating ACLs anywhere along the path to avoid the expressways from getting hammered and clogging up the logs. </div>
<div><br>
</div>
<div>We’ll be enabling this on the MRA expressway pairs for the time being. </div>
<div><br>
</div>
<div>From my understanding, MRA uses 5061, 8443, 5222 inbound and B2B uses 5060. </div>
<div><br>
</div>
<div>Would it be advisable, to build ACLs only allowing certain address (space) to connect?</div>
<div><br>
</div>
<div>This would be on top of any rules/zones we build into the ExpE and CUCM (css). </div>
<div><br>
</div>
<div>We’re trying to avoid the obvious impact of scanning Ip addresses/uri’s for sip connectivity. </div>
<div><br>
</div>
<div>What are people doing?</div>
<br>
<br>
<div id="m_6078027502892570623AppleMailSignature">
<p class="MsoNormal" style="margin:0in 0in 0.0001pt"><span style="background-color:rgba(255,255,255,0)"><i>-sent from mobile device-</i></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt"><span style="background-color:rgba(255,255,255,0)"><b><br>
</b></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt"><span style="background-color:rgba(255,255,255,0)"><b>Lelio Fulgenzi, B.A.</b> | Senior Analyst<u></u><u></u></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt"><span style="background-color:rgba(255,255,255,0)">Computing and Communications Services | University of Guelph<u></u><u></u></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt"><span style="background-color:rgba(255,255,255,0)">Room 037 Animal Science & Nutrition Bldg | <a dir="ltr">50
Stone Rd E | Guelph, ON | N1G 2W1</a><u></u><u></u></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt"><font color="#000000"><span style="background-color:rgba(255,255,255,0)"><a href="tel:519-824-4120;56354" dir="ltr" target="_blank">519-824-4120
Ext. 56354</a> | <a href="mailto:lelio@uoguelph.ca" target="_blank">lelio@uoguelph.ca</a><u></u><u></u></span></font></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt"><span style="background-color:rgba(255,255,255,0)"> </span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt"><font color="#000000"><span style="background-color:rgba(255,255,255,0)"><a href="http://www.uoguelph.ca/ccs" target="_blank">www.uoguelph.ca/ccs</a> | @UofGCCS on Instagram, Twitter and
Facebook<u></u><u></u></span></font></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt"><span style="background-color:rgba(255,255,255,0)"> </span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt"><span style="background-color:rgba(255,255,255,0)"><img border="0" width="187" height="100" id="m_6078027502892570623Picture_x0020_1" alt="University of Guelph Cornerstone with Improve Life tagline" action="http://null" title="null" style="width:1.9479in;height:1.0416in"></span></p>
</div>
</div>
</div>
_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" rel="noreferrer" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br>
</blockquote></div>