In some cases, the SSP provides its own SBC/Router and a dedicated
interface and network address is preferred. This is done by activating
USEWANIF in AMO CGWB.
The external SBC contains the Internet facing IP (and will often suffice
instead for a firewall), thus no additional configuration is needed to
standard SSP configuration.
SPE in the direction of SSP is controlled via TDCSU SECLEVEL. TLS
signaling connection with payload encryption is possible if having the
correct security certificates, profile configuration and SECLEVEL=SECURE.