Introduction

Astaro Security Linux is an Enterprise firewall based on Linux. In particular, it includes:

...

Astaro Security Linux is a very powerful network security solution with a highly functional Web based user interface. With the introductuon of Release 6, Astaro Security Linux now also supports a SIP proxy.

Download

Astaro Security Linux (release 6.001) can be found on freshmeat, from where you can download an ISO image.

You can also obtain a copy from the Astaro Web site. Registration is required to get a free home use license or the 30 day evaluation license. The ISO image includes a 7 day trial license with limited functionality. Unfortunately, the free home use license only supports 10 users. With a few IP phones and some other devices that go out to the Internet for firmware update queries, this is easily not enough.

SIP Proxy Use Cases

SIP Phone behind the firewall connects to a public VoIP Provider

This basic use case is the first supported by Astaro Security Linux release 6.001. I was able to test this with a Grandstream Budgetone phone that connects to Free World Dialup (FWD). Outbound proxy and STUN support were both disabled and the only parameter specified in the phone is the FWD SIP proxy. This worked great.

Vonage TA behind the firewall that connects to the Vonage service

Could not get this service to work through the SIP proxy yet. If you know how, please post it here. (It works by opening a range of ports).

...

sipXecs behind firewall on the internal network - IP phone on the Internet wants to register

Could not yet test this use case. If you have done so, please post it here.