A method, performed in a network element, for communicating packet
multimedia data between a first endpoint and a second endpoint, the
method comprising the machine-implemented steps of receiving an outbound
multimedia data packet; determining if the outbound multimedia data
packet originated from a first endpoint that is logically behind a
security device; determining and storing information identifying a
logical pinhole in the security device, wherein the logical pinhole is
associated with expected inbound multimedia data packets directed to the
first endpoint; performing an action that keeps the logical pinhole open
during all of a communication session between the first endpoint and the
second endpoint; and forwarding inbound multimedia data packets directed
from the second endpoint to the first endpoint via the logical pinhole.