Yes, but you may need to engage the help of your network security colleagues, in order to configure the firewall appropriately.

sip.audio provides STUN servers to help with NAT traversal, so adding stun.sip.audio to your SIP device configuration will help in many (but not all) cases.