Just put the SBC on a Windows machine. The installer created Windows firewall rules to open port 5060.
I can get the SBC to communicate with the cloud server, but only when I turn off Windows Firewall completely. With it on, phones connecting through the SBC won't connect to the cloud server...