Cisco ASA 5505 Configuration Manual page 994

Information about the Cisco Mobility Advantage Proxy Feature
Figure 45-3
Mobility Advantage Proxy Using NAT/PAT
In both scenarios
UMA servers.
In scenario 2
firewall does not have to open up a wildcard pinhole for inbound traffic.
Cisco ASA 5500 Series Configuration Guide using ASDM
45-4
Cisco UMC/Cisco UMA Architecture – Scenario 2: Security Appliance as Mobility
Advantage Proxy Only
Client connects to
cuma.example.com
(192.0.2.41)
DMZ
192.0.2.41/24 192.0.2.182/24
outside inside
ASA with
TLS Proxy
(Figure 45-2 and
(Figure 45-3), PAT can be used to converge all client traffic into one source IP, so that the
Cisco UMC Client
Internet
ISP
Gateway
Internal Network
IP Address:
172.16.27.41
(DMZ routable)
Active
Directory
Exchange
Cisco Unified
Enterprise Network
Figure 45-3), NAT can be used to hide the private address of the Cisco
Chapter 45 Configuring Cisco Mobility Advantage
Corporate
Firewall
eth0
Cisco UMA
Cisco UCM
Conference
Voice mail
Presence
M
MP
OL-20339-01