Yes, it is possible. But in current version such accessibility is limited due to security reasons. External caller should be registered extension/provider of the system, or, at least should have auth-id/password to authenticate INVITE sent to the system. Otherwise incoming call from it will be rejected.
We're thinking about implementing some external "trunk" to define and support such external SIP calls for future versions.