This diagram is an example for supporting native remote workers.
You must configure the enterprise firewall to:
Allow Layer 3 NAT only.
Disable all SIP aware functionality such as ALG.
Forward the TCP signaling ports (by default 9443) to IP Office Server Edition system.
Forward the RTP ports (by default 56000 to 58000) to IP Office Server Edition system.