The diagram below is an example for supporting remote workers with an ASBCE.

You must configure the enterprise firewall to:

• Allow Layer 3 NAT only.

• Disable all SIP aware functionality such as ALG.

• Forward the TCP signaling ports (by default 9443) to IP Office Server Edition.

• Forward the RTP ports (by default 56000 to 58000 to IP Office Server Edition.

You must configure the ASBCE with:

• An application relay for connections to port 9443 on the portal server.

• STUN and TURN for media relay and NAT resolution to the WebRTC Gateway service

You must configure the WebRTC Gateway with:

• TURN support using the ASBCE for Media Relay.

• Public FQDN/IP Address of the firewall address as STUNHost. WebRTC Clients without STUNHost configuration initialize using this address.

Configure split DNS entries for the ASBCE FQDN. For the STUNHost, the address must resolve to:

• Public DNS: The public FQDN/IP address of the enterprise firewall which routes to the external interface of the ASBCE.

• Private DNS: The internal interface of the ASBCE.