Which Cisco component handles firewall traversal for Webex/MRA?

• A. Expressway-C/Expressway-E pair.
• B. ASA Firewall.
• C. IOS-XE Router.
• D. CUCM Publisher.

Answer: (A)

Firewall traversal for Webex/MRA is handled by the Expressway pair (Expressway-C and Expressway-E). These devices sit at the network edge and act as the traversal proxy that negotiates through NATs and firewalls so remote endpoints can reach CUCM and Webex services securely. Expressway-C connects to CUCM to enable signaling from remote users, while Expressway-E sits in the DMZ and handles inbound/outbound media, TLS/DTLS-SRTP tunnels, and policy enforcement, ensuring remote calls can traverse the firewall without exposing internal systems directly. The other options don’t provide this dedicated traversal role: a generic ASA firewall is just a firewall, IOS-XE routers can route or VPN traffic but don’t offer the integrated Webex/MRA traversal proxy, and the CUCM Publisher is responsible for call control, not firewall traversal.