Customer Premise Firewall/Router Recommendations

I am in the position of needing to recommend a line of SMB (10-50 person offices) router/firewall devices that will play nice with VoIP. Specifically, office has phones (generally Cisco SPA's) connecting to remove service provider Asterisk servers. Historically, I've stayed out of the hardware on the customer side, but the growing presence of "stuff that breaks SIP" is leading me to pick a vendor. I generally am in the "don't touch my signalling" camp (read: no ALG). Is there a single vendor that is consistently good about not mucking with things too much? -jbn

We have a lot of our customers installing the Cisco RV 120W, and have had great luck with it. It does have SIP ALG turned on by default, but it's an easy "click" to disable it. The router supports QOS, they're easy to find (Office Depot, for example), and they're not bad price-wise for what you get. Mark -----Original Message----- From: voiceops-bounces at voiceops.org [mailto:voiceops-bounces at voiceops.org] On Behalf Of Justin B Newman Sent: Friday, March 02, 2012 10:44 AM To: voiceops at voiceops.org Subject: [VoiceOps] Customer Premise Firewall/Router Recommendations I am in the position of needing to recommend a line of SMB (10-50 person offices) router/firewall devices that will play nice with VoIP. Specifically, office has phones (generally Cisco SPA's) connecting to remove service provider Asterisk servers. Historically, I've stayed out of the hardware on the customer side, but the growing presence of "stuff that breaks SIP" is leading me to pick a vendor. I generally am in the "don't touch my signalling" camp (read: no ALG). Is there a single vendor that is consistently good about not mucking with things too much? -jbn _______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops

Stupid is good. If you've got a good nat traversal sbc in the core, you want the dumbest nat/fw at the cpe that you can find. Cisco (18xx, etc) can be reliably made to keep its mitts off your SIP. David Hiers CCIE (R/S, V), CISSP ADP Dealer Services 2525 SW 1st Ave. Suite 300W Portland, OR 97201 o: 503-205-4467 f: 503-402-3277 ###Please note my email address is changing: ###from David_Hiers at adp.com ### to David.Hiers at adp.com -----Original Message----- From: voiceops-bounces at voiceops.org [mailto:voiceops-bounces at voiceops.org] On Behalf Of Mark Wiles Sent: Friday, March 02, 2012 07:59 To: 'Justin B Newman'; voiceops at voiceops.org Subject: Re: [VoiceOps] Customer Premise Firewall/Router Recommendations We have a lot of our customers installing the Cisco RV 120W, and have had great luck with it. It does have SIP ALG turned on by default, but it's an easy "click" to disable it. The router supports QOS, they're easy to find (Office Depot, for example), and they're not bad price-wise for what you get. Mark -----Original Message----- From: voiceops-bounces at voiceops.org [mailto:voiceops-bounces at voiceops.org] On Behalf Of Justin B Newman Sent: Friday, March 02, 2012 10:44 AM To: voiceops at voiceops.org Subject: [VoiceOps] Customer Premise Firewall/Router Recommendations I am in the position of needing to recommend a line of SMB (10-50 person offices) router/firewall devices that will play nice with VoIP. Specifically, office has phones (generally Cisco SPA's) connecting to remove service provider Asterisk servers. Historically, I've stayed out of the hardware on the customer side, but the growing presence of "stuff that breaks SIP" is leading me to pick a vendor. I generally am in the "don't touch my signalling" camp (read: no ALG). Is there a single vendor that is consistently good about not mucking with things too much? -jbn _______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops _______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops This message and any attachments are intended only for the use of the addressee and may contain information that is privileged and confidential. If the reader of the message is not the intended recipient or an authorized representative of the intended recipient, you are hereby notified that any dissemination of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by e-mail and delete the message and any attachments from your system.

We're 100% happy with recommending Sonicwall for the customers in that price range. In their VoIP settings, enable "Consisten NAT" and disable all else, it will be reliable and stable. The NSA240 for the customers wanting high-end features, and the TZ210 for simple/cheap. Right now we are looking at Edgewater routers that have some good VoIP-specific features. Haven't decided on them, but I think you should take a look. My rep is Kevin Asano, 408-351-7220, kasano at edgewaternetworks.com. On Fri, Mar 2, 2012 at 8:59 AM, Mark Wiles <mwiles at akabis.com> wrote:
We have a lot of our customers installing the Cisco RV 120W, and have had great luck with it. It does have SIP ALG turned on by default, but it's an easy "click" to disable it. The router supports QOS, they're easy to find (Office Depot, for example), and they're not bad price-wise for what you get. Mark
-----Original Message----- From: voiceops-bounces at voiceops.org [mailto:voiceops-bounces at voiceops.org] On Behalf Of Justin B Newman Sent: Friday, March 02, 2012 10:44 AM To: voiceops at voiceops.org Subject: [VoiceOps] Customer Premise Firewall/Router Recommendations
I am in the position of needing to recommend a line of SMB (10-50 person offices) router/firewall devices that will play nice with VoIP. Specifically, office has phones (generally Cisco SPA's) connecting to remove service provider Asterisk servers. Historically, I've stayed out of the hardware on the customer side, but the growing presence of "stuff that breaks SIP" is leading me to pick a vendor. I generally am in the "don't touch my signalling" camp (read: no ALG). Is there a single vendor that is consistently good about not mucking with things too much?
-jbn _______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
_______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
-- Carlos Alvarez TelEvolve 602-889-3003

I love Edgewater and have been using them with Broadsoft for over 10 years. Their support is allot better then other BIG box router providers I have encountered. Check them out! As noted prior there is also Sonicwall and Adtran Thanks- Zak Rupas Tier 3 Engineer -----Original Message----- From: voiceops-bounces at voiceops.org [mailto:voiceops-bounces at voiceops.org] On Behalf Of Carlos Alvarez Sent: Friday, March 02, 2012 9:28 AM To: voiceops at voiceops.org Subject: Re: [VoiceOps] Customer Premise Firewall/Router Recommendations We're 100% happy with recommending Sonicwall for the customers in that price range. In their VoIP settings, enable "Consisten NAT" and disable all else, it will be reliable and stable. The NSA240 for the customers wanting high-end features, and the TZ210 for simple/cheap. Right now we are looking at Edgewater routers that have some good VoIP-specific features. Haven't decided on them, but I think you should take a look. My rep is Kevin Asano, 408-351-7220, kasano at edgewaternetworks.com. On Fri, Mar 2, 2012 at 8:59 AM, Mark Wiles <mwiles at akabis.com> wrote:
We have a lot of our customers installing the Cisco RV 120W, and have had great luck with it. It does have SIP ALG turned on by default, but it's an easy "click" to disable it. The router supports QOS, they're easy to find (Office Depot, for example), and they're not bad price-wise for what you get. Mark
-----Original Message----- From: voiceops-bounces at voiceops.org [mailto:voiceops-bounces at voiceops.org] On Behalf Of Justin B Newman Sent: Friday, March 02, 2012 10:44 AM To: voiceops at voiceops.org Subject: [VoiceOps] Customer Premise Firewall/Router Recommendations
I am in the position of needing to recommend a line of SMB (10-50 person offices) router/firewall devices that will play nice with VoIP. Specifically, office has phones (generally Cisco SPA's) connecting to remove service provider Asterisk servers. Historically, I've stayed out of the hardware on the customer side, but the growing presence of "stuff that breaks SIP" is leading me to pick a vendor. I generally am in the "don't touch my signalling" camp (read: no ALG). Is there a single vendor that is consistently good about not mucking with things too much?
-jbn _______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
_______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
-- Carlos Alvarez TelEvolve 602-889-3003 _______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops

Ill bump Edgewater as well. Ive been using them for about 5 years and they are stellar. Their ALG actually solves problems instead of creating them, and gives you as the service provider an incredibly robust tool set to monitor and troubleshoot your customers with. -Ryan On 03/02/2012 08:32 AM, Zak Rupas wrote:
I love Edgewater and have been using them with Broadsoft for over 10 years. Their support is allot better then other BIG box router providers I have encountered. Check them out! As noted prior there is also Sonicwall and Adtran
Thanks- Zak Rupas Tier 3 Engineer
-----Original Message----- From: voiceops-bounces at voiceops.org [mailto:voiceops-bounces at voiceops.org] On Behalf Of Carlos Alvarez Sent: Friday, March 02, 2012 9:28 AM To: voiceops at voiceops.org Subject: Re: [VoiceOps] Customer Premise Firewall/Router Recommendations
We're 100% happy with recommending Sonicwall for the customers in that price range. In their VoIP settings, enable "Consisten NAT" and disable all else, it will be reliable and stable. The NSA240 for the customers wanting high-end features, and the TZ210 for simple/cheap.
Right now we are looking at Edgewater routers that have some good VoIP-specific features. Haven't decided on them, but I think you should take a look. My rep is Kevin Asano, 408-351-7220, kasano at edgewaternetworks.com.
On Fri, Mar 2, 2012 at 8:59 AM, Mark Wiles<mwiles at akabis.com> wrote:
We have a lot of our customers installing the Cisco RV 120W, and have had great luck with it. It does have SIP ALG turned on by default, but it's an easy "click" to disable it. The router supports QOS, they're easy to find (Office Depot, for example), and they're not bad price-wise for what you get. Mark
-----Original Message----- From: voiceops-bounces at voiceops.org [mailto:voiceops-bounces at voiceops.org] On Behalf Of Justin B Newman Sent: Friday, March 02, 2012 10:44 AM To: voiceops at voiceops.org Subject: [VoiceOps] Customer Premise Firewall/Router Recommendations
I am in the position of needing to recommend a line of SMB (10-50 person offices) router/firewall devices that will play nice with VoIP. Specifically, office has phones (generally Cisco SPA's) connecting to remove service provider Asterisk servers. Historically, I've stayed out of the hardware on the customer side, but the growing presence of "stuff that breaks SIP" is leading me to pick a vendor. I generally am in the "don't touch my signalling" camp (read: no ALG). Is there a single vendor that is consistently good about not mucking with things too much? -jbn _______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
_______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
-- Carlos Alvarez TelEvolve 602-889-3003 _______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops _______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops

Edgewater Networks - Edgemarc ...you will have no issues...we have used them for 7-8 years with great success..in all VOIP environments -----Original Message----- From: voiceops-bounces at voiceops.org [mailto:voiceops-bounces at voiceops.org] On Behalf Of Zak Rupas Sent: Friday, March 02, 2012 11:32 AM To: Carlos Alvarez; voiceops at voiceops.org Subject: Re: [VoiceOps] Customer Premise Firewall/Router Recommendations I love Edgewater and have been using them with Broadsoft for over 10 years. Their support is allot better then other BIG box router providers I have encountered. Check them out! As noted prior there is also Sonicwall and Adtran Thanks- Zak Rupas Tier 3 Engineer -----Original Message----- From: voiceops-bounces at voiceops.org [mailto:voiceops-bounces at voiceops.org] On Behalf Of Carlos Alvarez Sent: Friday, March 02, 2012 9:28 AM To: voiceops at voiceops.org Subject: Re: [VoiceOps] Customer Premise Firewall/Router Recommendations We're 100% happy with recommending Sonicwall for the customers in that price range. In their VoIP settings, enable "Consisten NAT" and disable all else, it will be reliable and stable. The NSA240 for the customers wanting high-end features, and the TZ210 for simple/cheap. Right now we are looking at Edgewater routers that have some good VoIP-specific features. Haven't decided on them, but I think you should take a look. My rep is Kevin Asano, 408-351-7220, kasano at edgewaternetworks.com. On Fri, Mar 2, 2012 at 8:59 AM, Mark Wiles <mwiles at akabis.com> wrote:
We have a lot of our customers installing the Cisco RV 120W, and have had great luck with it. It does have SIP ALG turned on by default, but it's an easy "click" to disable it. The router supports QOS, they're easy to find (Office Depot, for example), and they're not bad price-wise for what you get. Mark
-----Original Message----- From: voiceops-bounces at voiceops.org [mailto:voiceops-bounces at voiceops.org] On Behalf Of Justin B Newman Sent: Friday, March 02, 2012 10:44 AM To: voiceops at voiceops.org Subject: [VoiceOps] Customer Premise Firewall/Router Recommendations
I am in the position of needing to recommend a line of SMB (10-50 person offices) router/firewall devices that will play nice with VoIP. Specifically, office has phones (generally Cisco SPA's) connecting to remove service provider Asterisk servers. Historically, I've stayed out of the hardware on the customer side, but the growing presence of "stuff that breaks SIP" is leading me to pick a vendor. I generally am in the "don't touch my signalling" camp (read: no ALG). Is there a single vendor that is consistently good about not mucking with things too much?
-jbn _______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
_______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
-- Carlos Alvarez TelEvolve 602-889-3003 _______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops _______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops

We are huge fans of Adtran. Excellent products. The TA900 series is a real workhorse, a powerful SIP toolbox that can also deliver FXS and PRI to legacy gear. The Netvanta 3120 is great for straight ethernet environments but lacks a console port which is a minor annoyance. These will both handle SIP very well as well as firewall, VPN, etc. Warranty is 10 years. We've had reliability problems with Edgemarc, they require a pretty ugly proxy-arp hack to deliver pass-through data without NAT, and the annoyance of crippleware where you buy a fully featured box but then have to pay extra for each feature already built in is irritating (and expensive). Edgewater is also not too friendly with regard to making adjustments to boxes in service. Change a data firewall rule and you get a pop-up box that lets you know it will drop all voice calls (and it does!). No real command-line interface to speak of, no human-readable configuration files, not easily backed up with RANCID or other automated tools. -- Jay Hennigan - CCIE #7880 - Network Engineering - jay at impulse.net Impulse Internet Service - http://www.impulse.net/ Your local telephone and internet company - 805 884-6323 - WB6RDV

-1 for Sonicwall. Been fighting issues with 1-1 NATs with separate signaling server and media server setups. The Sonicwall SIP ALG doesn't take into account the 1-1 NAT for the media server and sets the external IP in the SDP header to the signaling server. However, a Cisco 3725 (and most other IOS based routers) worked out of the box with this type of setup. Lee Riemer Director of Technical Operations Bestline Communications, L.P. Voice 512.328.9095 Fax 512.328.9095
-----Original Message----- From: voiceops-bounces at voiceops.org [mailto:voiceops- bounces at voiceops.org] On Behalf Of Carlos Alvarez Sent: Friday, March 02, 2012 10:28 AM To: voiceops at voiceops.org Subject: Re: [VoiceOps] Customer Premise Firewall/Router Recommendations
We're 100% happy with recommending Sonicwall for the customers in that price range. In their VoIP settings, enable "Consisten NAT" and disable all else, it will be reliable and stable. The NSA240 for the customers wanting high-end features, and the TZ210 for simple/cheap.
Right now we are looking at Edgewater routers that have some good VoIP- specific features. Haven't decided on them, but I think you should take a look. My rep is Kevin Asano, 408-351-7220, kasano at edgewaternetworks.com.
On Fri, Mar 2, 2012 at 8:59 AM, Mark Wiles <mwiles at akabis.com> wrote:
We have a lot of our customers installing the Cisco RV 120W, and have had great luck with it. It does have SIP ALG turned on by default, but it's an easy "click" to disable it. The router supports QOS, they're easy to find (Office Depot, for example), and they're not bad price-wise for what you get. Mark
-----Original Message----- From: voiceops-bounces at voiceops.org [mailto:voiceops-bounces at voiceops.org] On Behalf Of Justin B Newman Sent: Friday, March 02, 2012 10:44 AM To: voiceops at voiceops.org Subject: [VoiceOps] Customer Premise Firewall/Router Recommendations
I am in the position of needing to recommend a line of SMB (10-50 person offices) router/firewall devices that will play nice with VoIP. Specifically, office has phones (generally Cisco SPA's) connecting to remove service provider Asterisk servers. Historically, I've stayed out of the hardware on the customer side, but the growing presence of "stuff that breaks SIP" is leading me to pick a vendor. I generally am in the "don't touch my signalling" camp (read: no ALG). Is there a single vendor that is consistently good about not mucking with things too much?
-jbn _______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
_______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
-- Carlos Alvarez TelEvolve 602-889-3003 _______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops

As we've all said, turn off the ALG. On Fri, Mar 2, 2012 at 9:43 AM, Lee Riemer <LRiemer at bestline.net> wrote:
-1 for Sonicwall. ?Been fighting issues with 1-1 NATs with separate signaling server and media server setups. ?The Sonicwall SIP ALG doesn't take into account the 1-1 NAT for the media server and sets the external IP in the SDP header to the signaling server. ?However, a Cisco 3725 (and most other IOS based routers) worked out of the box with this type of setup.
Lee Riemer Director of Technical Operations Bestline Communications, L.P. Voice 512.328.9095 Fax 512.328.9095
-----Original Message----- From: voiceops-bounces at voiceops.org [mailto:voiceops- bounces at voiceops.org] On Behalf Of Carlos Alvarez Sent: Friday, March 02, 2012 10:28 AM To: voiceops at voiceops.org Subject: Re: [VoiceOps] Customer Premise Firewall/Router Recommendations
We're 100% happy with recommending Sonicwall for the customers in that price range. ?In their VoIP settings, enable "Consisten NAT" and disable all else, it will be reliable and stable. ?The NSA240 for the customers wanting high-end features, and the TZ210 for simple/cheap.
Right now we are looking at Edgewater routers that have some good VoIP- specific features. ?Haven't decided on them, but I think you should take a look. ?My rep is Kevin Asano, 408-351-7220, kasano at edgewaternetworks.com.
On Fri, Mar 2, 2012 at 8:59 AM, Mark Wiles <mwiles at akabis.com> wrote:
We have a lot of our customers installing the Cisco RV 120W, and have had great luck with it. It does have SIP ALG turned on by default, but it's an easy "click" to disable it. The router supports QOS, they're easy to find (Office Depot, for example), and they're not bad price-wise for what you get. Mark
-----Original Message----- From: voiceops-bounces at voiceops.org [mailto:voiceops-bounces at voiceops.org] On Behalf Of Justin B Newman Sent: Friday, March 02, 2012 10:44 AM To: voiceops at voiceops.org Subject: [VoiceOps] Customer Premise Firewall/Router Recommendations
I am in the position of needing to recommend a line of SMB (10-50 person offices) router/firewall devices that will play nice with VoIP. Specifically, office has phones (generally Cisco SPA's) connecting to remove service provider Asterisk servers. Historically, I've stayed out of the hardware on the customer side, but the growing presence of "stuff that breaks SIP" is leading me to pick a vendor. I generally am in the "don't touch my signalling" camp (read: no ALG). Is there a single vendor that is consistently good about not mucking with things too much?
-jbn _______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
_______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
-- Carlos Alvarez TelEvolve 602-889-3003 _______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
-- Carlos Alvarez TelEvolve 602-889-3003

I would love to if the PBX could signal its external IP or the customer would put a public IP on the interface of the PBX.... Isn't this thread about the ALG? Sounds like the *boxes aren't behind an SBC and they won't be good without an ALG. Lee Riemer Director of Technical Operations Bestline Communications, L.P. Voice 512.328.9095 Fax 512.328.9095
-----Original Message----- From: voiceops-bounces at voiceops.org [mailto:voiceops- bounces at voiceops.org] On Behalf Of Carlos Alvarez Sent: Friday, March 02, 2012 10:49 AM To: voiceops at voiceops.org Subject: Re: [VoiceOps] Customer Premise Firewall/Router Recommendations
As we've all said, turn off the ALG.
On Fri, Mar 2, 2012 at 9:43 AM, Lee Riemer <LRiemer at bestline.net> wrote:
-1 for Sonicwall. ?Been fighting issues with 1-1 NATs with separate signaling server and media server setups. ?The Sonicwall SIP ALG doesn't take into account the 1-1 NAT for the media server and sets the external IP in the SDP header to the signaling server. ?However, a Cisco 3725 (and most other IOS based routers) worked out of the box with this type of setup.
Lee Riemer Director of Technical Operations Bestline Communications, L.P. Voice 512.328.9095 Fax 512.328.9095
-----Original Message----- From: voiceops-bounces at voiceops.org [mailto:voiceops- bounces at voiceops.org] On Behalf Of Carlos Alvarez Sent: Friday, March 02, 2012 10:28 AM To: voiceops at voiceops.org Subject: Re: [VoiceOps] Customer Premise Firewall/Router Recommendations
We're 100% happy with recommending Sonicwall for the customers in that price range. ?In their VoIP settings, enable "Consisten NAT" and disable all else, it will be reliable and stable. ?The NSA240 for the customers wanting high-end features, and the TZ210 for simple/cheap.
Right now we are looking at Edgewater routers that have some good VoIP- specific features. ?Haven't decided on them, but I think you should take a look. ?My rep is Kevin Asano, 408-351-7220, kasano at edgewaternetworks.com.
On Fri, Mar 2, 2012 at 8:59 AM, Mark Wiles <mwiles at akabis.com> wrote:
We have a lot of our customers installing the Cisco RV 120W, and have had great luck with it. It does have SIP ALG turned on by default, but it's an easy "click" to disable it. The router supports QOS, they're easy to find (Office Depot, for example), and they're not bad price-wise for what you get. Mark
-----Original Message----- From: voiceops-bounces at voiceops.org [mailto:voiceops-bounces at voiceops.org] On Behalf Of Justin B Newman Sent: Friday, March 02, 2012 10:44 AM To: voiceops at voiceops.org Subject: [VoiceOps] Customer Premise Firewall/Router Recommendations
I am in the position of needing to recommend a line of SMB (10-50 person offices) router/firewall devices that will play nice with VoIP. Specifically, office has phones (generally Cisco SPA's) connecting to remove service provider Asterisk servers. Historically, I've stayed out of the hardware on the customer side, but the growing presence of "stuff that breaks SIP" is leading me to pick a vendor. I generally am in the "don't touch my signalling" camp (read: no ALG). Is there a single vendor that is consistently good about not mucking with things too much?
-jbn _______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
_______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
-- Carlos Alvarez TelEvolve 602-889-3003 _______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
-- Carlos Alvarez TelEvolve 602-889-3003
_______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops

I've posted this before, but I'm a huge fan of Edgewater as well. I've actually worked with Kevin too and he's great. That said, the Firewall features of the EM's aren't as strong as some of the higher end options like the top of the line SonicWalls, ASA's etc. If you have the means, I'd actually recommend segmented LANs (physical or virtual) with your preferred breed of FW on the data side and an Edgewater on the voice side. -----Original Message----- From: voiceops-bounces at voiceops.org [mailto:voiceops-bounces at voiceops.org] On Behalf Of Carlos Alvarez Sent: Friday, March 02, 2012 11:28 AM To: voiceops at voiceops.org Subject: Re: [VoiceOps] Customer Premise Firewall/Router Recommendations We're 100% happy with recommending Sonicwall for the customers in that price range. In their VoIP settings, enable "Consisten NAT" and disable all else, it will be reliable and stable. The NSA240 for the customers wanting high-end features, and the TZ210 for simple/cheap. Right now we are looking at Edgewater routers that have some good VoIP-specific features. Haven't decided on them, but I think you should take a look. My rep is Kevin Asano, 408-351-7220, kasano at edgewaternetworks.com. On Fri, Mar 2, 2012 at 8:59 AM, Mark Wiles <mwiles at akabis.com> wrote:
We have a lot of our customers installing the Cisco RV 120W, and have had great luck with it. It does have SIP ALG turned on by default, but it's an easy "click" to disable it. The router supports QOS, they're easy to find (Office Depot, for example), and they're not bad price-wise for what you get. Mark
-----Original Message----- From: voiceops-bounces at voiceops.org [mailto:voiceops-bounces at voiceops.org] On Behalf Of Justin B Newman Sent: Friday, March 02, 2012 10:44 AM To: voiceops at voiceops.org Subject: [VoiceOps] Customer Premise Firewall/Router Recommendations
I am in the position of needing to recommend a line of SMB (10-50 person offices) router/firewall devices that will play nice with VoIP. Specifically, office has phones (generally Cisco SPA's) connecting to remove service provider Asterisk servers. Historically, I've stayed out of the hardware on the customer side, but the growing presence of "stuff that breaks SIP" is leading me to pick a vendor. I generally am in the "don't touch my signalling" camp (read: no ALG). Is there a single vendor that is consistently good about not mucking with things too much?
-jbn _______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
_______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
-- Carlos Alvarez TelEvolve 602-889-3003 _______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops

On 3/2/2012 10:59 AM, Mark Wiles wrote:
We have a lot of our customers installing the Cisco RV 120W, and have had great luck with it. It does have SIP ALG turned on by default, but it's an easy "click" to disable it. The router supports QOS, they're easy to find (Office Depot, for example), and they're not bad price-wise for what you get. Mark
-----Original Message----- From: voiceops-bounces at voiceops.org [mailto:voiceops-bounces at voiceops.org] On Behalf Of Justin B Newman Sent: Friday, March 02, 2012 10:44 AM To: voiceops at voiceops.org Subject: [VoiceOps] Customer Premise Firewall/Router Recommendations
I am in the position of needing to recommend a line of SMB (10-50 person offices) router/firewall devices that will play nice with VoIP. Specifically, office has phones (generally Cisco SPA's) connecting to remove service provider Asterisk servers. Historically, I've stayed out of the hardware on the customer side, but the growing presence of "stuff that breaks SIP" is leading me to pick a vendor. I generally am in the "don't touch my signalling" camp (read: no ALG). Is there a single vendor that is consistently good about not mucking with things too much?
I have a bunch of SSGs in all sizes deployed at various locations and have never had any issues with them at all. They're affordable, straightforward to manage and maintain. I have had issues with ASAs, Sonicwalls are outright horrible, Watchguard horrid. -- =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ J. Oquendo SGFA, SGFE, C|EH, CNDA, CHFI, OSCP, CPT, RWSP, GREM "It takes 20 years to build a reputation and five minutes to ruin it. If you think about that, you'll do things differently." - Warren Buffett 42B0 5A53 6505 6638 44BB 3943 2BF7 D83F 210A 95AF http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x2BF7D83F210A95AF
participants (11)
-
carlos@televolve.com
-
David.Hiers@adp.com
-
jay@west.net
-
joquendo@e-fensive.net
-
justin@ejtown.org
-
LRiemer@bestline.net
-
mwiles@akabis.com
-
ryandelgrosso@gmail.com
-
scott@sberkman.net
-
twolf@unifiedtechnologies.com
-
zak@simplesignal.com