I ran into a similar issue with SIP registration drops, and whitelisting helped a ton. With telxi, I had to allow both their SIP and RTP IP ranges—once those were in the firewall's whitelist, the VOIP connection stayed stable. Also had to make sure SIP ALG was turned off, since it messed things...