Question

A company deploys Cisco Expressway-C and Expressway-E to enable business-to-business (B2B) video calls with external partner organizations over the internet. During deployment, the network administrator asks which edge device should be placed in the DMZ and what mechanism allows media and signaling to traverse the firewall without requiring inbound ports to be opened toward the internal network. Which statement correctly describes the design?

Accepted Answer

Expressway-E sits in the DMZ; it and Expressway-C form a traversal zone in which Expressway-C initiates the outbound connection, so no inbound firewall pinholes are needed toward the internal network.

Answer

Expressway-C sits in the DMZ and initiates a traversal zone connection outbound to Expressway-E on the internal LAN, keeping the internal network protected.

Answer

Expressway-E sits in the DMZ and Expressway-C on the internal LAN, but the firewall must be configured with static NAT and inbound SIP/media pinholes from Expressway-C to Expressway-E.

Answer

Both Expressway-C and Expressway-E are placed in the DMZ and connect directly to CUCM via a secure SIP trunk, eliminating the need for a traversal zone.