9608 will only support h.323, so, you can do VPN
You can do h.323 port forwarding, which not many, if any hackers scan for.
Or the best, but requires J100 SIP sets, SBC.
You can do port forwarding on SIP as well, using non standard ports, but SBC is always better.