To use the 3CX SBC, the firewall device in front of the SBC must be configured to NAT inbound port 5060 (UDP/TCP) to the internal SBC device.