Calling Through A Router, Using A Dmz - Polycom V500 System Administrator's Manual

Administrator's Guide for the V500 System
3 - 12
Setting
NAT is H.323
Compatible
Address Displayed
in Global Directory

Calling Through a Router, Using a DMZ

A Demilitarized Zone (DMZ) is a way to configure a network so that the
device that is in the DMZ (such as the V500) is served by the router, but is
outside the firewall. Depending on your router, configuring the V500 system
to be in the DMZ may affect its ability to communicate locally with other
devices on the internal LAN.
With a DMZ, no unauthorized external connections are allowed with the
devices inside the firewall, but the V500 is allowed free access to the Internet.
Therefore, this configuration leaves the V500 without protection from external
sources.
Visit the Polycom Security Center at
information. Systems deployed outside a firewall are potentially vulnerable to
unauthorized access. You can also register to receive periodic email updates and
advisories.
There are two types of DMZs:
Virtual DMZ — With a virtual DMZ, all ports through the router are
•
opened for the device in the DMZ (in this case, the V500). This has the
affect of placing the V500 on the outside of the router's firewall. Keep in
mind, however, that the V500 may still be protected by some global
firewall securities, which may adversely affect video conferencing.
• Physical DMZ — With a physical DMZ, there is an actual, physical port on
your router, usually labeled DMZ, into which you plug your V500 LAN
cable. This port places the V500 physically outside of the firewall, which is
usually less restrictive, but is also less secure.
Typically, you should only use a DMZ when other configurations fail to allow
H.323 traffic to flow through unobstructed. If you do choose to place your
V500 in a DMZ, you must:
1. Make sure your router's firewall software provides a DMZ.
2. Assign the internal IP address of the V500 to the DMZ.
For more information about how to perform these steps, refer to the
documentation that came with your router.
Description
Specifies that the system is behind a NAT that is capable of
translating H.323 traffic.
Lets you choose whether to display this system's public or
private address in the Global Directory.
www.polycom.com for timely security