We are implementing a network with port isolation for the PC Clients. Do we need to leave the ports that have phones connected as open (unprotected)? This should then allow each phone to transmit to every other device for local phone-to-phone calls. As well as respond to multicast requests for provisioning. I'm guessing if we protected the phone ports, then the PBX would need to deliver audio as that would be on an unprotected port.