Calling Through A Router, Using A Dmz - Polycom V500 Administrator's Manual

Administrator's Guide for the V500 System

Calling Through a Router, Using a DMZ

3 - 14
To enable firewall traversal on a V500 system:
1. Go to System > Admin Settings > Network > IP > Firewall > Next.
2. Select Enable NAT/Firewall Traversal.
A Demilitarized Zone (DMZ) is a way to configure a network so that the
device in the DMZ (such as the V500 system) is served by the router, but is
outside the firewall. Depending on your router, configuring the V500 system
to be in the DMZ may affect its ability to communicate locally with other
devices on the internal LAN.
With a DMZ, no unauthorized external connections are allowed with the
devices inside the firewall, but the V500 system is allowed free access to the
Internet. This configuration leaves the V500 system without protection from
external sources.
Visit the Polycom Security Center at
information. Systems deployed outside a firewall are potentially vulnerable to
unauthorized access. You can also register to receive periodic email updates and
advisories.
There are two types of DMZs:
• Virtual DMZ — With a virtual DMZ, all ports through the router are
opened for the device in the DMZ. This has the effect of placing the
V500 system on the outside of the router's firewall. Keep in mind,
however, that the V500 system may still be protected by some global
firewall securities, which may adversely affect video conferencing.
• Physical DMZ — With a physical DMZ, there is an actual, physical port on
your router, usually labeled DMZ, into which you plug the LAN cable
from your V500 system. This port places the V500 system physically
outside of the firewall, which is usually less restrictive, but is also less
secure.
Typically, you should only use a DMZ when other configurations fail to allow
H.323 traffic to flow through unobstructed. If you do choose to place your
V500 system in a DMZ, you must:
1. Make sure your router's firewall software provides a DMZ.
2. Assign the internal IP address of the V500 system to the DMZ.
For more information about how to perform these steps, refer to the
documentation that came with your router.
www.polycom.com/support for timely security