A company is migrating from PRI circuits to a SIP trunk provided by an Internet Telephony Service Provider (ITSP). The service provider's SIP signaling uses a different codec set and dialing format than the internal Cisco Unified Communications Manager cluster, and security requires that the internal network topology not be exposed to the provider. Which device should the engineer deploy at the network edge to meet these requirements?