H.460 Nat Firewall Traversal - Polycom RealPresence Immersive Studio Administrator's Manual

Caution: Systems deployed outside a firewall are potentially vulnerable to unauthorized
access. Visit the Polycom Security section of the Knowledge Base at
support.polycom.com
receive periodic email updates and advisories.

H.460 NAT Firewall Traversal

You can configure RealPresence ITP systems to use standards-based H.460.18 and H.460.19 firewall
traversal, which enables video systems to more easily establish IP connections across firewalls.
The following illustration shows how a service provider might provide H.460 firewall traversal between two
enterprise locations. In this example the Polycom Video Border Proxy
on the edge of the service provider network and facilitates IP calls between RealPresence ITP systems
behind different firewalls.
Procedure
1. Enable firewall traversal.
a) Go to Admin Settings > Network > IP Network > Firewall.
b) Select Enable H.460 Firewall Traversal.
2. Register the system to an external Polycom VBP device that supports the H.460.18 and H.460.19
standards.
3. Make sure that firewalls being traversed allow the RealPresence ITP system behind them to open
outbound TCP and UDP connections.
• Firewalls with a stricter rule set should allow the RealPresence ITP system to open at least
the following outbound TCP and UDP ports:
◦ (TCP)
◦ 14085-15084 (TCP)
◦ (UDP)
◦ 16386-25386 (UDP)
Polycom, Inc.
for timely security information. You can also register to
Securing the System
™ ®
(VBP ) firewall traversal device is
34