Port Forwarding on a SIP

[xxoorr]

Hello I've a question about configuring port 5060 on SonicWall TZ300.
How can I open port 5060 and then how can I allow only specific public IP on that port? Sorry for the lame question but I'm still new in the network administrations.

From what I see - first I should create custom address object on a WAN zone with the public IP.
Second I should create access rule to allow from WAN to LAN with the service - above configured address object, and lastly I should create a NAT policy to translate incoming packets and forward them to the internal networks only on that port. Is this the right approach? Many thanks!!!

 

[bpm55]

You also need to remember that 5060 is only the port for the SIP connection it does not include the audio/RTP traffic that will come in/out on a different port.

I don't know exactly how to set the firewall, but I do work with SIP on a daily basis.