We do have multiple public IP addresses, and two firewalls, but both firewalls share the same primary router, also because the SIP gateway is in the production network, so I guess it is not possible this way. Maybe we should get another firewall just for the 3CX PBX, and have the SIP provider...